Network Analysis & Packet Capture with Arkime’s Creator Andy Wick

Short Summary

The video discusses a live stream featuring Andy Wick, the creator of the Aramy project, a tool for packet capture and network analysis. The conversation covers the history of Aramy, its capabilities, demos, and future developments, as well as community engagement and applications in various industries.

Key Points

• The live stream is one of the final sessions for the year 2024.
• Andy Wick discusses the Aramy project, originally known as Molok, which is focused on packet capture and network analysis.
• The tool aims to be a cost-effective alternative to expensive commercial software for network monitoring.
• Aramy was open-sourced in 2012, fostering community involvement and contributions.
• Significant features include session-based storage of packets and integration with tools like Zeke and CyberChef.
• New features have been added in recent versions, including improved user experience, faster searches, and support for various protocols.
• The architecture allows for flexible data storage options, including local disk and cloud storage solutions.
• Demonstrations showed how users can search and analyze traffic effectively and how to create custom tag fields for easier querying.
• Future enhancements aim to expand integration capabilities, including potential for scripting with Lua.
• The Aramy project is utilized primarily by corporate users, with contributions and inquiries from academia as well.