5eyes.dot

digraph G {

subgraph cluster_cap{
softflow;
suricata;
bro;
moloch_cap;
}
{rank=same; softflow,suricata,bro,moloch_cap } 

router -> softflow;
router -> suricata;
router -> bro;
router -> moloch_cap;

subgraph cluster_db{
elastic;
influx;
nfdump;
}

moloch_cap -> elastic;
moloch_cap -> wise;
wise -> moloch_cap;

bro -> heka;
suricata -> heka;
suricata -> pigsty;
pigsty -> elastic;
softflow -> nfdump;
heka -> influx;
heka -> elastic;

subgraph cluster_ui{
nfsen;
moloch_view;
kibana;
grafana;
}

nfdump -> nfsen;
elastic -> kibana;
elastic -> moloch_view;
influx -> grafana;

nfsen -> yellowteam; 
moloch_view  -> yellowteam;
kibana  -> yellowteam;
grafana  -> yellowteam;

inet -> bro;
inet -> wise;

grep -> bro [style="dotted" color="blue"];
grep -> suricata [style="dotted" color="blue"];
grep -> nfdump [style="dotted" color="blue"];
yellowteam -> grep [style="dotted" color="blue"];
grep [label="grep awk uniq sort head"; color="blue"; ];
yellowteam [label="Yellow Team"; color="yellow"; ];
inet [label="some good source in Internets"; color="green"; ];


{rank=min; router}
{rank=max; yellowteam}

}