tree: 4c1b3a11db44e3ef8de5bfcac644369a2d354b78 [path history] [tgz]
  1. fastcapa/
  2. pycapa/
  3. README.md
metron-sensors/README.md

Metron Sensors

  • metron-bro-plugin-kafka: Provides integration between Bro and Kafka. A Bro plugin that sends logging output to Kafka. This provides a convenient means for tools in the Hadoop ecosystem, such as Storm, Spark, and others to process the data generated by Bro.

  • fastcapa: Performs fast network packet capture by leveraging Linux kernel-bypass and user space networking technology. The probe will bind to a network interface, capture network packets, and send the raw packet data to Kafka. This provides a scalable mechanism for ingesting high-volumes of network packet data.

  • pycapa: Performs lightweight network packet capture, retrieves network packets from Kafka, generates libpcap-compliant files, and enables integration with third-party tools like Wireshark.