This repository contains base libraries for a Nemea system. The Nemea system is a modular system that consists of independent modules for network traffic analysis and anomaly detection.

The framework consists of:

• libtrap -- communication interface for messages transfer between Nemea modules
• UniRec -- flexible and efficient data format of flow-records
• common -- usefull common functions and data structures
• python -- python wrapper for libtrap and UniRec that allows development of nemea modules in python
• pycommon -- python common modules and methods, there is currently a support of alerts creation in the IDEA format that can be stored into MongoDB or sent to the Warden incident sharing system

This repository is usually used as a git submodule of https://github.com/CESNET/Nemea However, it can be installed independently using:

./bootstrap.sh
./configure
make
sudo make install

For information about configuration options see:

./configure --help

Python parts must be installed separately when needed. It can be done using:

cd python; sudo python setup.py install

and

cd pycommon; sudo python setup.py install

Travis CI build:

Coverity Scan: