Skip to content

Latest commit

 

History

History
25 lines (20 loc) · 1.64 KB

README.md

File metadata and controls

25 lines (20 loc) · 1.64 KB
Raw

Metron Sensors

  • metron-bro-plugin-kafka: Provides integration between Bro and Kafka. A Bro plugin that sends logging output to Kafka. This provides a convenient means for tools in the Hadoop ecosystem, such as Storm, Spark, and others to process the data generated by Bro.

  • fastcapa: Performs fast network packet capture by leveraging Linux kernel-bypass and user space networking technology. The probe will bind to a network interface, capture network packets, and send the raw packet data to Kafka. This provides a scalable mechanism for ingesting high-volumes of network packet data.

  • pycapa: Performs lightweight network packet capture, retrieves network packets from Kafka, generates libpcap-compliant files, and enables integration with third-party tools like Wireshark.