Popularity
1.1
Growing
Activity
0.6
-
10
1
1

Programming language: Go
License: MIT License
Tags: Utilities    
Latest version: v1.1.0

silk alternatives and similar packages

Based on the "Utilities" category.
Alternatively, view silk alternatives based on common mentions on social networks and blogs.

Do you think we are missing an alternative of silk or a related project?

Add another 'Utilities' Package

README

GoDoc Go Report Card

silk flows

https://tools.netsa.cert.org/silk/docs.html

Description

This package makes it easy to read common silk files without using C Go.

Go Doc

https://godoc.org/github.com/chrispassas/silk

What is silk

Source https://tools.netsa.cert.org/silk/faq.html#what-silk

SiLK is a suite of network traffic collection and analysis tools developed and maintained by the CERT Network Situational >Awareness Team (CERT NetSA) at Carnegie Mellon University to facilitate security analysis of large networks. The SiLK tool >suite supports the efficient collection, storage, and analysis of network flow data, enabling network security analysts to >rapidly query large historical traffic data sets.

Supported File Formats

Record Size Record Version Compression Supported
88 RWIPV6ROUTING VERSION 1 None (0) :white_check_mark:
88 RWIPV6ROUTING VERSION 1 Zlib (1) :white_check_mark:
88 RWIPV6ROUTING VERSION 1 Lzo (2) :white_check_mark:
88 RWIPV6ROUTING VERSION 1 Snappy (3) :white_check_mark:
68 RWIPV6 VERSION 1 None (0) :white_check_mark:
68 RWIPV6 VERSION 1 Zlib (1) :white_check_mark:
68 RWIPV6 VERSION 1 Lzo (2) :white_check_mark:
68 RWIPV6 VERSION 1 Snappy (3) :white_check_mark:
56 RWIPV6 VERSION 2 None (0) :white_check_mark:
56 RWIPV6 VERSION 2 Zlib (1) :white_check_mark:
56 RWIPV6 VERSION 2 Lzo (2) :white_check_mark:
56 RWIPV6 VERSION 2 Snappy (3) :white_check_mark:

Example

package main

import (
    "fmt"
    "log"
    "github.com/chrispassas/silk"
)

func main() {

    var testFile = "testdata/FT_RWIPV6-v2-c0-L.dat"
    var err error
    var sf silk.File

    if sf, err = silk.OpenFile(testFile); err != nil {
        log.Fatalf("OpenFile() error:%s", err)
    }

    log.Printf("Compression:%d", sf.Header.Compression)
    log.Printf("FileFlags:%d", sf.Header.FileFlags)
    log.Printf("FileVersion:%d", sf.Header.FileVersion)
    log.Printf("HeaderLength:%d", sf.Header.HeaderLength)
    log.Printf("MagicNumber:%x", sf.Header.MagicNumber)
    log.Printf("RecordFormat:%d", sf.Header.RecordFormat)
    log.Printf("RecordSize:%d", sf.Header.RecordSize)
    log.Printf("RecordVersion:%d", sf.Header.RecordVersion)
    log.Printf("SilkVersion:%d", sf.Header.SilkVersion)

    log.Printf("File record count:%d\n", len(sf.Flows))

    fmt.Printf("start_time_ms,src_ip,dst_ip,src_port,dst_port\n")
    for _, flow := range sf.Flows {
        fmt.Printf("%d,%s,%s,%d,%d\n",
            flow.StartTimeMS,
            flow.SrcIP.String(),
            flow.DstIP.String(),
            flow.SrcPort,
            flow.DstPort,
        )
        //Etc... for other silk.Flow values
    }
}