Arkime

Arkime (formerly Moloch) is a large scale, open source, indexed packet capture and search tool.

Utilities · Arkime

Configuration parameters

  • url — Server URL (required)
  • credentials — Username (required)
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)

Commands (13)

  • arkime-connection-csv-get

    Gets a list of nodes and links in csv format and returns them to the client.

  • arkime-connection-list

    Gets a list of nodes and links and returns them to the client.

  • arkime-field-list

    Gets available database field objects pertaining to sessions.

  • arkime-multi-unique-field-list

    Gets an intersection of unique field values (with or without counts) and sends them to the client.

  • arkime-pcap-file-list

    Gets a list of PCAP files that Arkime knows about.

  • arkime-session-csv-get

    Gets a list of sessions and returns them as a CSV to the client.

  • arkime-session-list

    Gets a list of sessions and returns them to the client.

  • arkime-session-pcap-get

    Retrieve the raw session data in pcap format.

  • arkime-session-tag-add

    Add tag(s) to individual session(s) by ID or by query.

  • arkime-session-tag-remove

    Removes tag(s) from individual session(s) by ID or by query.

  • arkime-spigraph-get

    Gets a list of values for a field with counts and graph data and returns them to the client.

  • arkime-spiview-get

    Gets a list of field values with counts and returns them to the client.

  • arkime-unique-field-list

    Gets a list of unique field values (with or without counts) and sends them to the client.