May 26, 2018
YAF is Yet Another Flowmeter
YAF is Yet Another Flowmeter. It processes packet data from pcap3 dumpfiles as generated by tcpdump1 or via live capture from an interface using pcap3 into bidirectional flows, then exports those flows to IPFIX Collecting Processes or in an IPFIX-based file format. YAF’s output can be used with the SiLK flow analysis tools and any other IPFIX compliant toolchain.