Given you have created flows with nfpcapd, you can now use nfdump (more info here https://manpages.ubuntu.com/manpages/jammy/en/man1/nfdump.1.html) to write flows in a custom format to a csv-file. fmt indicates how to […]
Renaming: If you are reading in from a topic to which you sent data formatted as Json you must serialize the data, optionally process it and finally you serialize it
List all topics Consume from a given topic from console
Assumption: Spark and Clickhouse are up and running. According to the official Clickhouse documentation we can use the ClicHouse-Native-JDBC driver. To use it with python we simply download the shaded
Use nfdump suite. First transform pcap into nfcapd-format. For that: In case you have many pcap files, you can use a bash loop: Mind the extra p in nfPcapd and
