[netsa-tools-discuss] SiLK Plugins

[Hosam Hittini]

Dear Mr. Mark,

Thank you, you got what I mean
But what I am looking for is plugins to detect spoofing for example, or DDoS
attacks
Are you aware of such developed plugins?

Regards,
Hosam Hittini
System Security, Security Operations Center
Etisalat
-----Original Message-----
From: Mark Thomas [mailto:mthomas at cert.org] 
Sent: Tuesday, August 11, 2015 7:58 PM
To: Hosam Hittini <hosam.hittini at ies.etisalat.ae>
Cc: netsa-help at cert.org; netsa-tools-discuss at cert.org; 'Majid Qureshi'
<mmajid at ies.etisalat.ae>
Subject: Re: [netsa-tools-discuss] SiLK Plugins

A list of C plug-ins that may be used with the SiLK analysis tools is
documented at http://tools.netsa.cert.org/silk/docs.html#analysis-plugins

The silk/src/plugins directory contains some additional plug-ins for use in
the analysis tools which may serve as example code for building your own.
See the silk-plugin[1] manual page for more information on creating plug-ins
from C.

See the silkpython[2] manual page for building plug-ins from python.

There are two plug-ins that work with rwflowpack.  Their source code is
under the silk/site directory, and their manual pages are
packlogic-twoway[3] and packlogic-generic[4].

If I have misunderstood what you mean my plugins, I am sorry and I ask that
you clarify what you mean.

Regards,

-Mark

[1]http://tools.netsa.cert.org/silk/silk-plugin.html
[2]http://tools.netsa.cert.org/silk/silkpython.html
[3]http://tools.netsa.cert.org/silk/packlogic-twoway.html
[4[http://tools.netsa.cert.org/silk/packlogic-generic.html


-----Original Message-----
From: Hosam Hittini <hosam.hittini at ies.etisalat.ae>
Date: Tue, 11 Aug 2015 12:29:59 +0400
To: <netsa-help at cert.org>, <netsa-tools-discuss at cert.org>
Cc: 'Majid Qureshi' <mmajid at ies.etisalat.ae>
Subject: [netsa-tools-discuss] SiLK Plugins

Hi,

 

I wonder if you can provide me with a list of plugins that were developed
for SiLK along with their documentation

Thank you