search

rysavy-ondrej / ethanol

An experimental environment for context-based flow artifact analysis.
1 stars 0 forks source link

Support IPFIX input #5

Open rysavy-ondrej opened 10 months ago

rysavy-ondrej commented 10 months ago

Consider IPFIX as a possible input for the tool. This can be implemented in the pipeline as a preprocessor for input IPFIX data via integrating one of the following IPFIX to json tools:

https://github.com/calmh/ipfixcat https://tools.netsa.cert.org/fixbuf/ipfix2json.html

rysavy-ondrej commented 6 months ago

Also, an alternative is to use native C# library for IPFIX -- https://github.com/rysavy-ondrej/dotnetflow