{"id":18706415,"url":"https://github.com/rskntroot/arkime","last_synced_at":"2026-01-28T13:01:09.399Z","repository":{"id":55079811,"uuid":"327833450","full_name":"rskntroot/arkime","owner":"rskntroot","description":"Arkime on Docker with role based on entrypoint script. (Roles: Viewer, Capture, Import)","archived":false,"fork":false,"pushed_at":"2022-02-04T23:13:59.000Z","size":97,"stargazers_count":3,"open_issues_count":0,"forks_count":1,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-06-03T10:59:20.328Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rskntroot.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-01-08T07:44:59.000Z","updated_at":"2024-05-25T09:10:42.000Z","dependencies_parsed_at":"2022-08-14T11:20:52.267Z","dependency_job_id":null,"html_url":"https://github.com/rskntroot/arkime","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/rskntroot/arkime","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rskntroot%2Farkime","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rskntroot%2Farkime/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rskntroot%2Farkime/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rskntroot%2Farkime/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rskntroot","download_url":"https://codeload.github.com/rskntroot/arkime/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rskntroot%2Farkime/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28845761,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-28T12:37:07.070Z","status":"ssl_error","status_checked_at":"2026-01-28T12:37:06.657Z","response_time":57,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-07T12:14:03.577Z","updated_at":"2026-01-28T13:01:09.379Z","avatar_url":"https://github.com/rskntroot.png","language":"Shell","readme":"# Docker Arkime v3.3.1-1\n\nArkime on Docker with container role based on entrypoint scripts \n\n## Run the Project\n\n\u003e Project requires directories in /opt/docker\n````\nmkdir -p /opt/docker\ncd /opt/docker\ngit init\ngit clone https://github.com/rskntroot/arkime\ncd /opt/docker/arkime\ndocker build . -t arkime:3.3.1-1\ndocker-compose up -d\n````\n\u003e Copy .pcap files into the directory /opt/docker/arkime/import/., these files will be imported automatically\n\n##### Prerequisites: \n- ubuntu:20.04\n- elasticsearch:7.17.0\n- traefik:v2.6.0 (in progress)\n\n## Access\n\u003e Arkime is available over http port 80 (default) through a webbrowser.\n\u003e Arkime's authentication is turned off by default.\n\n## Available roles\n\n##### Viewer\n| Type | Field | Value | optional |\n| ------ | ------ | ------ |------|\n| ENV | OFFLOAD_AUTH | false | true |\n| ENV | ARKIME_USER | root | true |\n| ENV | ARKIME_PSWD | arkime-pswd | true |\n| ENV | ES_HOST | elasticsearch | false | \n| VOLUME | /opt/docker/arkime/log/ | /opt/arkime/local/log/ | false |\n| ENTRYPOINT | | /opt/arkime/local/bin/viewer.sh | false |\n\n##### Import\n| Type | Field | Value | optional |\n| ------ | ------ | ------ |------|\n| ENV | OFFLOAD_AUTH | false | true |\n| ENV | ARKIME_USER | root | true |\n| ENV | ARKIME_PSWD | arkime-pswd | true |\n| ENV | ES_HOST | elasticsearch | false |\n| ENV | ARKIME_VIEWER | viewer | false |\n| VOLUME | /opt/docker/arkime/log/ | /opt/arkime/local/log/ | false |\n| VOLUME | /opt/docker/arkime/import | /import | false |\n| ENTRYPOINT | | /opt/arkime/local/bin/import.sh | false | \n\n## View logs\n\u003e After running docker-compose the /opt/arkime/local/log/ directory will appear with component logs.\n```sh\n$ docker logs -f arkime_viewer_1\n$ docker logs -f arkime_import_1\n$ docker logs -f arkime_elasticsearch_1\n```\n\n## Default Login Credentials\n| Username | Password | \n| ------ | ------ |\n| root |  arkime-pswd |\n\n## Future Additions\n- Enable [ Arkime Capture ]\n- Enable peristent storage for ELASTICSEARCH (ES)\n- Add tolerance with multi-node ES\n- Tie in a Kibana node\n- Push docker node stats into ElasticSearch\n- Port project to Kubernetes\n- Enable autoTLS with letsEncrypt\n- ...\n- Possibly messing with netsniff-ng or pcap++ to push pcap to any capture node from any host.\n- Profit?\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frskntroot%2Farkime","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frskntroot%2Farkime","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frskntroot%2Farkime/lists"}