Package: rockfish Version: 2026.07.11 Architecture: amd64 Maintainer: Fidelis Machines Installed-Size: 103284 Pre-Depends: bash Depends: libc6 (>= 2.34), libssl3, libgcc-s1, libstdc++6 Suggests: suricata, maxmind-geoip-database Filename: pool/main/r/rockfish/rockfish_2026.07.11_amd64.deb Size: 25893640 MD5sum: 292fe92da2633dffc0194f99a4299838 SHA1: 374b6595b9f86fa02d2a30bd77a8ace85796f6c3 SHA256: df3ca67b2092cbaa4ebed35f886b843cede7b31e0b84d737d2121c5f7b2041cf Section: net Priority: optional Homepage: https://rockfishndr.com Description: Rockfish NDR - Network Detection and Response EVE/JSON log ingestion, Parquet conversion, threat hunting, anomaly detection, and reporting. Processes Suricata EVE logs into queryable Parquet files with optional S3 upload. . Single binary with subcommands: detect, report, hunt, rule, config, compact, and more. . Ships as a complete deployment toolkit: the rockfish binary plus the systemd units (detection + reporting), cron examples for rule updates, example configuration, and helper scripts needed for a successful sensor deployment. . Installed to /opt/rockfish with binary in bin/, configuration in etc/, and the deployment toolkit (units, cron examples, installers) in scripts/. Package: rockfish-suricata Version: 8.0.6-rockfish1 Architecture: amd64 Maintainer: Fidelis Machines Installed-Size: 192968 Depends: libpcre2-8-0, libyaml-0-2, libjansson4, libmagic1, libcap-ng0, libpcap0.8, zlib1g, liblz4-1, libnet1 Filename: pool/main/r/rockfish-suricata/rockfish-suricata_8.0.6-rockfish1_amd64.deb Size: 32682592 MD5sum: 4bf1366d7acf697a8880e7fc33e4116c SHA1: a9c30b0462effe4c11389ccd5758f966ee13c989 SHA256: d7d12155a51b3e38d508874b13943311c35cbc425df8906136da9afee70689fe Section: net Priority: optional Homepage: https://rockfishndr.com Description: Rockfish Suricata — Suricata 8.0.6 with Rockfish plugins Self-contained Suricata build with the Rockfish Suricata plugins baked in (FMADIO capture, OT/IIoT protocol decoders, and the transport_signals / payload_entropy / tls_pqc telemetry plugins), plus a Rockfish-wired suricata.yaml (EVE -> /var/run/rockfish/rockfish.sock) and a systemd unit. Installed under /opt/rockfish-suricata; feeds Rockfish NDR over the EVE unix_stream socket.