Skip to content
Jacob van Walraven edited this page Feb 18, 2020 · 39 revisions

Libtrace bigdata is a real time passive packet analysis application which can be used to perform network level performance monitoring of your applications.

Libtrace bigdata will group individual packet together into a flow and automatically determine the protocol for that flow. Generated results can be exported to a range of data storage or streaming applications such as InfluxDB, Kafka and Elasticsearch.

Libtrace bigdata comes with a range of pre-built input plugins, filtering plugins and output plugins which will satisfy most users needs. Libtrace bigdata is a event driven application and provides an extensive API for custom plugin development.

User documentation

Installation
Configuration

Input plugins
Protocol Statistics
DNS
Flow Statistics
HTTP
BGP

Filter plugins
Maxmind
JA3

Output plugins
InfluxDB
Kafka
Elasticsearch

Developer documentation

Creating Plugins
Available Events

Tutorial 1 - Count the number of packets observed every X seconds

Clone this wiki locally