CERT SiLK
• Software
SiLK is a collection of traffic analysis tools used to facilitate security analysis of large networks.
Publisher
Software Engineering Institute
Abstract
SiLK, the System for Internet-Level Knowledge, is a collection of traffic analysis tools developed at the Software Engineering Institute to facilitate security analysis of large networks. The SiLK tool suite supports the efficient collection, storage, and analysis of network flow data, enabling network security analysts to rapidly query large historical traffic data sets. SiLK is ideally suited for analyzing traffic on the backbone or border of a large, distributed enterprise or mid-sized ISP.