Arkime

Arkime (formerly Moloch) is a large scale, open source, indexed packet capture and search tool.

Category

Utilities

Pack

Arkime

Configuration parameters

• url — Server URL (required)
• credentials — Username (required)
• proxy — Use system proxy settings
• insecure — Trust any certificate (not secure)

Commands (13)

• arkime-connection-csv-get — Gets a list of nodes and links in csv format and returns them to the client.
• arkime-connection-list — Gets a list of nodes and links and returns them to the client.
• arkime-field-list — Gets available database field objects pertaining to sessions.
• arkime-multi-unique-field-list — Gets an intersection of unique field values (with or without counts) and sends them to the client.
• arkime-pcap-file-list — Gets a list of PCAP files that Arkime knows about.
• arkime-session-csv-get — Gets a list of sessions and returns them as a CSV to the client.
• arkime-session-list — Gets a list of sessions and returns them to the client.
• arkime-session-pcap-get — Retrieve the raw session data in pcap format.
• arkime-session-tag-add — Add tag(s) to individual session(s) by ID or by query.
• arkime-session-tag-remove — Removes tag(s) from individual session(s) by ID or by query.
• arkime-spigraph-get — Gets a list of values for a field with counts and graph data and returns them to the client.
• arkime-spiview-get — Gets a list of field values with counts and returns them to the client.
• arkime-unique-field-list — Gets a list of unique field values (with or without counts) and sends them to the client.