tree: 54ccb73ce18ddfba1963484d7a9d9f9c5b45bcaa [path history] [tgz]
  1. bro-plugin-kafka/
  2. fastcapa/
  3. pycapa/
  4. README.md
metron-sensors/README.md

Metron Sensors

  • bro-plugin-kafka: Provides integration between Bro and Kafka. A Bro plugin that sends logging output to Kafka. This provides a convenient means for tools in the Hadoop ecosystem, such as Storm, Spark, and others to process the data generated by Bro.

  • fastcapa: Performs fast network packet capture by leveraging Linux kernel-bypass and user space networking technology. The probe will bind to a network interface, capture network packets, and send the raw packet data to Kafka. This provides a scalable mechanism for ingesting high-volumes of network packet data.

  • pycapa: Performs lightweight network packet capture, retrieves network packets from Kafka, generates libpcap-compliant files, and enables integration with third-party tools like Wireshark.