Arkime

Augment your current security infrastructure to store and index network traffic in standard PCAP format. Arkime offers full network visibility, facilitating the swift identification and resolution of security and network issues. Visibility Security teams gain access to the necessary network visibility data essential for responding to and investigating incidents to expose the full attack scope. Sca

[moongift]

パケットキャプチャ

[tmatsuu]

Web GUIを備えたパケットキャプチャ。複数のセンサーを管理できてメタデータはElasticsearchクラスタに保存して検索可。ほほう面白い。