[netsa-tools-discuss] arch options for separating analysis-pipeline from (collection+storage)

asad a.alii85 at gmail.com
Sat Oct 24 07:09:11 EDT 2015


Hey,


I have successfully running SILK with little issues, now I want to bring in
use of analysis - pipeline, but on a separating machine which infact is
live dvd provided by silk.

Please view attach (diagram) for understand current deployment settings.

Ideally, I just wanted use of rwsender as a server running on silk which is
doing collection and storage to send logs to analysis-pipeline box running
rwreceiver.

What I have read so far, that I have to use flowcap If I want to turn into
distributed model but so far this is not my cases.

So, my question essentially is that by using rwsender running on rwflowpack
machine can it send incremental flow records to analysis-pipeline machine.
If yes, how can it be done? Do I need to have flowcap running ?

I appreciate clarity on this issue. Thanks

regards
asad
-------------- next part --------------
HTML attachment scrubbed and removed
-------------- next part --------------
A non-text attachment was scrubbed...
Name: silk_config.png
Type: image/png
Size: 7389 bytes
Desc: not available
URL: <http://lists.sei.cmu.edu/pipermail/netsa-tools-discuss/attachments/20151024/e3dfff44/attachment.png>


More information about the netsa-tools-discuss mailing list