net-mgmt/yaf 2.19.3 FreeBSD
Yet Another Flowmeter
- System
- FreeBSD
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- License
- GPLv2
- Categories
- net-mgmt
- Package size
- 410.0 KiB, 1302.1 KiB installed
Description
YAF is Yet Another Flowmeter. It processes packet data from pcap(3) dumpfiles as generated by tcpdump(1) or via live capture from an interface using pcap(3) into bidirectional flows, then exports those flows to IPFIX Collecting Processes or in an IPFIX-based file format. YAF's output can be used with the SiLK flow analysis tools and any other IPFIX compliant toolchain.
In the other systems
| System | Port | Version |
|---|---|---|
| FreeBSD | net-mgmt/yaf | 2.19.3 |
| DragonFly | net-mgmt/yaf | 2.13.0_1 |
Install
Binary package:
pkg install yaf
From the ports tree:
cd /usr/ports/net-mgmt/yaf/ && make install clean
To depend on this port in another port's Makefile:
RUN_DEPENDS= yaf>0:net-mgmt/yaf
LIB_DEPENDS= libairframe.so:net-mgmt/yaf
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 2.19.3 | 2.19.3 | 2.11.0 | 2.13.0_1 | 2.19.3 |
| FreeBSD:14:quarterly | 2.19.3 | 2.19.3 | n/a | 2.13.0_1 | 2.19.3 |
| FreeBSD:15:latest | 2.19.3 | 2.19.3 | n/a | 2.13.0_1 | 2.13.0_1 |
| FreeBSD:15:quarterly | 2.19.3 | 2.19.3 | n/a | n/a | n/a |
| FreeBSD:16:latest | 2.19.3 | 2.19.3 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
As this port's Makefile names them.
Library 4
libfixbuf.so: net/libfixbuflibltdl.so: devel/libltdllibpcap.so: net/libpcaplibpcre2-8.so: devel/pcre2
The full lists below include those, and their dependencies in turn.
Build dependencies 20
Run dependencies 19
No port depends on this one.
Configuration
Options name: net-mgmt_yaf
| Option | Default | Description |
|---|---|---|
| APPLABEL | on | Create protocol application labels via traffic header inspection. |
| CMPTIP4 | off | Create compact IPv4 output (no IPv6 support). |
| DNSAUTH | off | Modify DNS export to only export Authoritative DNS responses. |
| DNSNX | off | Modify DNS export to only export NXDomain responses. |
| ENTROPY | on | Generate Shannon entropy values of the data stream. |
| FPEXPORT | off | Export of OS fingerprinting information, e.g. p0f. |
| IFEXP | off | Export capture interface for DAG/Napatech/Netronome cards. |
| LOCALTIME | off | Allow localtime to be used for command inputs and record printing. Flow records are always in UTC. |
| MPLS | off | MPLS capture and export |
| NONIP | off | Capture non-IP packets |
| PAYLOAD | on | YAF will enable reading past IP headers to do deep packet inspection |
| PLUGIN | on | Enable YAF plugins, primary for application labeling. |
- USES
- gnome libtool pathfix perl5 pkgconfig
- Service scripts
- none
Files
Manual pages 10
- airdaemon(1)
- applabel(1)
- filedaemon(1)
- getFlowKeyHash(1)
- yaf(1)
- yaf.init(1)
- yafMeta2Pcap(1)
- yafdhcp(1)
- yafdpi(1)
- yafscii(1)
pkg-plist 162
- bin/airdaemon
- bin/filedaemon
- bin/getFlowKeyHash
- bin/yaf
- bin/yafMeta2Pcap
- bin/yafcollect
- bin/yafscii
- include/airframe/airlock.h
- include/airframe/airopt.h
- include/airframe/airutil.h
- include/airframe/autoinc.h
- include/airframe/daeconfig.h
- include/airframe/logconfig.h
- include/airframe/mio.h
- include/airframe/mio_config.h
- include/airframe/mio_sink_file.h
- include/airframe/mio_sink_multi.h
- include/airframe/mio_sink_tcp.h
- include/airframe/mio_sink_udp.h
- include/airframe/mio_source_file.h
- include/airframe/mio_source_pcap.h
- include/airframe/mio_source_tcp.h
- include/airframe/mio_source_udp.h
- include/airframe/mio_stdio.h
- include/airframe/privconfig.h
- include/yaf/autoinc.h
- include/yaf/decode.h
- include/yaf/picq.h
- include/yaf/ring.h
- include/yaf/yafcore.h
- include/yaf/yafhooks.h
- include/yaf/yafrag.h
- include/yaf/yaftab.h
- include/yaf/yaftime.h
- lib/libairframe-.so.4
- lib/libairframe-.so.4.0.0
- lib/libairframe.so
- lib/libyaf-.so.4
- lib/libyaf-.so.4.0.0
- lib/libyaf.so
- lib/yaf/aolplugin.so
- lib/yaf/aolplugin.so.1
- lib/yaf/aolplugin.so.1.0.1
- lib/yaf/bgpplugin.so
- lib/yaf/bgpplugin.so.1
- lib/yaf/bgpplugin.so.1.0.1
- lib/yaf/dhcp_fp_plugin.so
- lib/yaf/dhcp_fp_plugin.so.1
- lib/yaf/dhcp_fp_plugin.so.1.0.1
- lib/yaf/dhcpplugin.so
- lib/yaf/dhcpplugin.so.1
- lib/yaf/dhcpplugin.so.1.0.1
- lib/yaf/dnp3plugin.so
- lib/yaf/dnp3plugin.so.1
- lib/yaf/dnp3plugin.so.1.0.1
- lib/yaf/dnsplugin.so
- lib/yaf/dnsplugin.so.1
- lib/yaf/dnsplugin.so.1.0.1
- lib/yaf/dpacketplugin.so
- lib/yaf/dpacketplugin.so.1
- lib/yaf/dpacketplugin.so.1.0.1
- lib/yaf/dumpplugin.so
- lib/yaf/dumpplugin.so.1
- lib/yaf/dumpplugin.so.1.0.1
- lib/yaf/ethipplugin.so
- lib/yaf/ethipplugin.so.1
- lib/yaf/ethipplugin.so.1.0.1
- lib/yaf/gh0stplugin.so
- lib/yaf/gh0stplugin.so.1
- lib/yaf/gh0stplugin.so.1.0.1
- lib/yaf/imapplugin.so
- lib/yaf/imapplugin.so.1
- lib/yaf/imapplugin.so.1.0.1
- lib/yaf/ircplugin.so
- lib/yaf/ircplugin.so.1
- lib/yaf/ircplugin.so.1.0.1
- lib/yaf/ldapplugin.so
- lib/yaf/ldapplugin.so.1
- lib/yaf/ldapplugin.so.1.0.1
- lib/yaf/ldpplugin.so
- lib/yaf/ldpplugin.so.1
- lib/yaf/ldpplugin.so.1.0.1
- lib/yaf/libmidencryption.so
- lib/yaf/libmidencryption.so.1
- lib/yaf/libmidencryption.so.1.0.1
- lib/yaf/modbusplugin.so
- lib/yaf/modbusplugin.so.1
- lib/yaf/modbusplugin.so.1.0.1
- lib/yaf/mysqlplugin.so
- lib/yaf/mysqlplugin.so.1
- lib/yaf/mysqlplugin.so.1.0.1
- lib/yaf/netdgmplugin.so
- lib/yaf/netdgmplugin.so.1
- lib/yaf/netdgmplugin.so.1.0.1
- lib/yaf/nntpplugin.so
- lib/yaf/nntpplugin.so.1
- lib/yaf/nntpplugin.so.1.0.1
- lib/yaf/ntpplugin.so
- lib/yaf/ntpplugin.so.1
- lib/yaf/ntpplugin.so.1.0.1
The first 100 are listed.
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| yaf-2.19.3.tar.gz | 2.29921e+06 | 6b03bc3d25495c01d8d8020b00a908ef1ed28b6edf78f631618208d81e809b30 |
Master sites 1
- http://tools.netsa.cert.org/releases/
Commit history 0
No commits in the history this site was built from.