Program Files

This section describes the programs and helper scripts installed with Trisul.

• Trisul Executable: the trisul probe process and its run modes.
• RAT: real-time monitor for Trisul pipeline performance.
• Trisul Flowcap: prune PCAP files by capping flow payloads.
• Trisul Reencrypt: re-encrypt stored PCAP files with a new passphrase.
• Trisul Udpsink: open NetFlow ports to stop ICMP unreachable messages.
• List Backup: list the slices to back up for a date range.
• Scan Slices: check slices against the METASLICE database.
• Watchdog: alert when a context stops flushing data.
• Install Monit: restart Hub and Probe processes if they stop.
• Distributed Domain: scripts that set up a distributed Hub and Probe domain.