[netsa-tools-discuss] Release of Analysis Pipeline 5.3

Daniel Ruef druef at cert.org
Thu Oct 1 15:32:55 EDT 2015


Analysis Pipeline 5.3 has been publicly released.

This version can process more than just SiLK data like in the 4.x versions. It can handle YAF records, including the deep packet inspection information, notably DNS and SSL data. IPFIX records of any format can also be read. The underlying library, schemaTools (also publicly released: http://tools.netsa.cert.org/schemaTools/index.html) will dynamically generate schemas allowing the Analysis Pipeline to interpret the data.

All of the analysis methods available in the previous versions can be used on the expanded data and record types.

Analysis Pipeline source code distribution: http://tools.netsa.cert.org/analysis-pipeline5/download.html

Anaysis Pipeline documentation: http://tools.netsa.cert.org/analysis-pipeline5/docs.html

schemaTools page: http://tools.netsa.cert.org/schemaTools/index.html

Dan Ruef
SEI - CERT


-------------- next part --------------
HTML attachment scrubbed and removed


More information about the netsa-tools-discuss mailing list