Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Sensor NameExternal Reference MaterialSensor DescriptionNative Sensor FormatSupported VersionsSensor Architecture
Data Plane Development Kit (DPDK) Probehttp://dpdk.org/A high speed packet capture probe designed especially for use with the latest Packet Capture (PCAP) service of MetronRaw Network Packets2.2.0 and above 
      
      
Bro IDShttps://www.bro.org/Used as a Deep Packet Inspection (DPI) sensor, primarily for HTTP and DNS data for Metron. In order to integrate Bro with Metron we require a Bro plug-in to be installed. The Bro plugin can be found here: https://github.com/apache/incubator-metron/tree/master/bro-plugin-kafkaMetron-Bro JSON

Bro 2.4.1 and above

Bro plug-in 0.1 and above

 
Yet Another Flowmeter (YAF)https://tools.netsa.cert.org/yaf/Processes packet data from PCAP into bidirectional flowsIPFIX (Netflow)2.8.1 and above 
Snorthttps://www.snort.org/Network-based intrusion detection system (NIDS) has the ability to perform real-time traffic analysis 2.9.8.0 and above      
      
      
      
      
      
      

...