SiLK
A command-line suite for collecting, storing, and analyzing network flow data.
By CERT Network Situational Awareness Team
Compare SiLK with another product
Alternatives
See all alternatives
About SiLK
SiLK collects IPFIX and NetFlow records, stores them in compact files, and provides tools to query and analyze historical traffic. Its analysis tools can be connected with pipes for queries ranging from individual record filtering to statistical summaries.
It is designed for security analysis on large networks, including enterprise backbones and mid-sized internet service providers.
Strengths
- Collects IPFIX and multiple NetFlow versions
- Stores flow records in compact files
- Supports filtering and statistical analysis through command pipelines
Limitations
- Designed for large network traffic datasets
- Requires a separate flow data collection setup
Details
- Pricing
- FreeFree under the GNU General Public License version 2.
- License
- GPL-2.0-or-later
- Developer
- CERT Network Situational Awareness Team
- Platforms
- macOS, Linux, Command line
- How it runs
- Downloadable app
- Best suited for
- Network analysts investigating historical traffic on large networks
- Categories
- Network tools, Security tools
- Last verified
- Added
- Provenance
- Selected from the Homebrew formula
- Sources