Product Description

NetSA Portal FOR LINUX Overview:

NetSA (Network Situational Awareness) Portal is a web-based tool designed to present network data and analysis results sourced from NAF, YAF, SiLK, and other related analysis tools like relational databases. The system is powered by RAVE technology to efficiently manage analysis results.

The NetSA Portal operates using a modular approach where each specific capability is encapsulated within a module. Adding new features and functionalities to the portal is easily achievable by integrating a new module along with a set of corresponding analyses in RAVE.

The NetSA Portal software as well as the analyses provided are licensed under the GPL (General Public License), ensuring open accessibility and adaptability.

Technical Specifications:

• Core system:
  
  
  
  • mod_python 3.3.1
  
  
  • Python 2.4.4
  
  
  • RAVE 1.9.5
  
  
  
  


• network_map module:
  
  
  
  • Python Imaging Library (PIL) 1.1.6
  
  
  • SiLK 0.11.7
  
  
  
  


• port_database module:
  
  
  
  • matplotlib 0.90.0
  
  
  • PostgreSQL 8.2.4
  
  
  • psycopg2 2.0.6
  
  
  • SiLK 0.11.7
  
  
  
  


• sensor_health module:
  
  
  
  • SiLK 0.11.7
  
  
  
  


• watchlists module:
  
  
  
  • numpy 1.0.2
  
  
  • Python Imaging Library (PIL) 1.1.6
  
  
  • scipy 0.5.2
  
  
  • SiLK 0.11.7
  
  
  
  

Installation and Configuration:

Installing NetSA Portal on your LINUX system involves running the install.py script with specified flags and optional arguments. Here are the key steps for installation:

1. Run the install.py script with the appropriate --prefix argument.


2. Configure the installation directory to serve web content and RAVE analyses.


3. Modify the necessary configuration files to tailor the portal to your specific requirements.


4. Check and verify the installation using automated tests.


5. Start Apache HTTP server and RAVE to make the system operational.

Split Installation Configuration:

In scenarios where a separation between analysis software and the web server is preferred, the NetSA Portal supports split installations. By utilizing the install-analysis and install-web commands, users can enable a distributed setup with proper configuration across both machines.

Security Enhancements:

To enhance security and privacy, users can modify the URL_BASE in raved.init and start-raved to switch from HTTP to HTTPS in a split configuration, ensuring encrypted data transmission.