Posted inSecurity
Guide to Arkime (Moloch) on Linux: Capture, Index, and Analyze Full Packet Capture (FPC) Network Traffic
Arkime (formerly Moloch) is a leading open-source Full Packet Capture (FPC) and indexing tool for Linux. Learn how to set up a monitoring cluster in 5 minutes, tune network interfaces, and use SPI search queries to hunt threats.