brew / rank 6684

Install silk with Homebrew

Collection of traffic analysis tools. Version 3.24.2 via Homebrew; verified 2026-05-14.

Install command Security notes

install

Additional install commands

macOS

Homebrewverified · 100%

brew install silk

local Homebrew formula metadata

overview

Package summary

Collection of traffic analysis tools

Project links

Homepage

Commands and aliases

flowcap
mapsid
num2dot
rwaddrcount
rwaggbag
rwaggbagbuild
rwaggbagcat
rwaggbagtool
rwallformats
rwappend
rwbag
rwbagbuild
rwbagcat
rwbagtool
rwcat
rwcombine
rwcompare
rwcount
rwcut
rwdedupe
rwfglob
rwfileinfo
rwfilter
rwflowappend
rwflowpack
rwgeoip2ccmap
rwgroup
rwguess
rwidsquery
rwip2cc
rwipfix2silk
rwmatch

history

Project history and usage

SiLK, the System for Internet-Level Knowledge, is CERT NetSA's suite for collecting, storing, and analyzing large volumes of network flow data. It combines collection daemons with many command-line analysis tools for querying binary SiLK Flow repositories.

Project history

The official credits describe SiLK as a CERT Network Situational Awareness project that grew out of earlier large-scale analysis work associated with Suresh Lakshman Konda. The public release notes list releases from SiLK 0.1 in December 2003 through 3.24.2 in May 2026.

The project has evolved from early NetFlow-oriented tooling into a broader flow-analysis suite with IPFIX, NetFlow v5/v9, PySiLK, plug-ins, IPsets, Bags, prefix maps, scan detection, and service packaging material.

Adoption history

The official site positions SiLK for backbone, enterprise border, and mid-sized ISP traffic analysis, and the input records a Homebrew package. The official downloads page also documents RPM availability for recent releases, reflecting use by Unix and Linux operators.

How it is used

Operators run packing tools such as flowcap and rwflowpack to collect IPFIX or NetFlow data into a SiLK data repository, then use analysis commands such as rwfilter, rwcut, rwstats, rwuniq, rwset, and rwbag in pipelines to answer security questions over historical flow data.

Why package nerds care

Package nerds care because SiLK is a large, old-school Unix tool suite with dozens of executables, daemon/service configuration, C/Perl/Python components, generated manpages, and data-file compatibility concerns. Packaging it means making a full operational network-analysis environment available from a package manager.

Timeline

2003: Official release notes list SiLK 0.1.
2008: Official release notes list SiLK 1.0.0.
2011: Official release notes list SiLK 3.0.0.
2017: Official release notes list SiLK 4.0.0 beta software while 3.x continues.
2026: Official downloads page lists SiLK 3.24.2.

Related projects

Related projects and components include YAF, libfixbuf, IPFIX, NetFlow, PySiLK, rwflowpack, flowcap, rwfilter, and the broader CERT NetSA Security Suite.

Sources

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for silk. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ${SILK_CONFIG_FILE}${SILK_DATA_ROOTDIR}/silk.conf/data/silk.conf${SILK_PATH}/share/silk/silk.conf${SILK_PATH}/share/silk.conf/usr/share/silk/silk.conf/usr/share/silk.conf/etc/rwflowpack.conf$prefix/etc/rwflowpack.conf

executables

Installed executables

Command	Kind	Exposure	Note
`flowcap`	executable	indexed executable	Discovered from the local executable index.
`mapsid`	executable	indexed executable	Discovered from the local executable index.
`num2dot`	executable	indexed executable	Discovered from the local executable index.
`rwaddrcount`	executable	indexed executable	Discovered from the local executable index.
`rwaggbag`	executable	indexed executable	Discovered from the local executable index.
`rwaggbagbuild`	executable	indexed executable	Discovered from the local executable index.
`rwaggbagcat`	executable	indexed executable	Discovered from the local executable index.
`rwaggbagtool`	executable	indexed executable	Discovered from the local executable index.
`rwallformats`	executable	indexed executable	Discovered from the local executable index.
`rwappend`	executable	indexed executable	Discovered from the local executable index.
`rwbag`	executable	indexed executable	Discovered from the local executable index.
`rwbagbuild`	executable	indexed executable	Discovered from the local executable index.
`rwbagcat`	executable	indexed executable	Discovered from the local executable index.
`rwbagtool`	executable	indexed executable	Discovered from the local executable index.
`rwcat`	executable	indexed executable	Discovered from the local executable index.
`rwcombine`	executable	indexed executable	Discovered from the local executable index.
`rwcompare`	executable	indexed executable	Discovered from the local executable index.
`rwcount`	executable	indexed executable	Discovered from the local executable index.
`rwcut`	executable	indexed executable	Discovered from the local executable index.
`rwdedupe`	executable	indexed executable	Discovered from the local executable index.
`rwfglob`	executable	indexed executable	Discovered from the local executable index.
`rwfileinfo`	executable	indexed executable	Discovered from the local executable index.
`rwfilter`	executable	indexed executable	Discovered from the local executable index.
`rwflowappend`	executable	indexed executable	Discovered from the local executable index.
`rwflowpack`	executable	indexed executable	Discovered from the local executable index.
`rwgeoip2ccmap`	executable	indexed executable	Discovered from the local executable index.
`rwgroup`	executable	indexed executable	Discovered from the local executable index.
`rwguess`	executable	indexed executable	Discovered from the local executable index.
`rwidsquery`	executable	indexed executable	Discovered from the local executable index.
`rwip2cc`	executable	indexed executable	Discovered from the local executable index.
`rwipfix2silk`	executable	indexed executable	Discovered from the local executable index.
`rwmatch`	executable	indexed executable	Discovered from the local executable index.
`rwnetmask`	executable	indexed executable	Discovered from the local executable index.
`rwp2yaf2silk`	executable	indexed executable	Discovered from the local executable index.
`rwpackchecker`	executable	indexed executable	Discovered from the local executable index.
`rwpcut`	executable	indexed executable	Discovered from the local executable index.
`rwpdedupe`	executable	indexed executable	Discovered from the local executable index.
`rwpdu2silk`	executable	indexed executable	Discovered from the local executable index.
`rwpmapbuild`	executable	indexed executable	Discovered from the local executable index.
`rwpmapcat`	executable	indexed executable	Discovered from the local executable index.
`rwpmaplookup`	executable	indexed executable	Discovered from the local executable index.
`rwpmatch`	executable	indexed executable	Discovered from the local executable index.
`rwpollexec`	executable	indexed executable	Discovered from the local executable index.
`rwptoflow`	executable	indexed executable	Discovered from the local executable index.
`rwrandomizeip`	executable	indexed executable	Discovered from the local executable index.
`rwreceiver`	executable	indexed executable	Discovered from the local executable index.
`rwrecgenerator`	executable	indexed executable	Discovered from the local executable index.
`rwresolve`	executable	indexed executable	Discovered from the local executable index.
`rwscan`	executable	indexed executable	Discovered from the local executable index.
`rwsender`	executable	indexed executable	Discovered from the local executable index.
`rwset`	executable	indexed executable	Discovered from the local executable index.
`rwsetbuild`	executable	indexed executable	Discovered from the local executable index.
`rwsetcat`	executable	indexed executable	Discovered from the local executable index.
`rwsetmember`	executable	indexed executable	Discovered from the local executable index.
`rwsettool`	executable	indexed executable	Discovered from the local executable index.
`rwsilk2ipfix`	executable	indexed executable	Discovered from the local executable index.
`rwsiteinfo`	executable	indexed executable	Discovered from the local executable index.
`rwsort`	executable	indexed executable	Discovered from the local executable index.
`rwsplit`	executable	indexed executable	Discovered from the local executable index.
`rwstats`	executable	indexed executable	Discovered from the local executable index.
`rwswapbytes`	executable	indexed executable	Discovered from the local executable index.
`rwtotal`	executable	indexed executable	Discovered from the local executable index.
`rwtuc`	executable	indexed executable	Discovered from the local executable index.
`rwuniq`	executable	indexed executable	Discovered from the local executable index.
`silk_config`	executable	indexed executable	Discovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03

manager version3.24.2

manager updated2026-05-14

local dataunknown

upstreamnot available

latest detectednot detected

okNo freshness warnings were generated.

install metadata

Package metadata

Package key	brew:silk
Version	3.24.2
Package manager	Homebrew
Homepage	https://tools.netsa.cert.org/silk/
Last updated	2026-05-14T21:28:11Z
Pulse	updated
Bottle	not recorded
Service	none declared

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/silk.yml

Used sources

Geiger risk classifier
cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
pkg.so package database
pkgdb category and tag curation