Open Source C Network Monitoring Software - Page 3

A bandwidth meter, for monitoring internet connection speeds and usage.

Xplico is a Network Forensic Analysis Tool (NFAT). The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP, MGCP, MEGACO, RTP), IRC, WhatsApp... Xplico is able to classify more than 140 (application) protocols. Xplico cam be used as sniffer-decoder if used in "live mode" or in conjunction with netsniff-ng. Xplico is used also in CapAnalysis: http://www.capanalysis.net

IPCAD runs captures traffic on the specified interfaces (BPF, PCAP, divert, tee, ULOG, IPQ), and records the traffic for later retrieval and analysis. Traffic exported via RSH or NetFlow.

Small tool for locate and display active DHCP servers on the subnet.

NFSwatch lets you monitor NFS requests to any given machine, or the entire local network. It mostly monitors NFS client traffic (NFS requests); it also monitors the NFS reply traffic from a server in order to measure the response time for each RPC.

tcp2com creates a bridge between a TCP socket and a serial port (COM). The program runs as a service under Windows NT. With tcp2com, you can telnet into any device you may have plugged into your COM port.

Passive network application response time monitor utilising libpcap packet capture. Maintains session state tracking host response, network round-trip times and end-point/network congestion. Can be configured for many protocols such as http, telnet...

"Show Traffic" monitors network traffic on the chosen network interface and displays it continuously. It could be used for locating suspicious network traffic or to evaluate current utilization of the network interface.

VA-Cluster Manager is a large scale server monitoring and management tool. Providing a modular architecture for adding new protocols and monitoring technology, VACM is extremely scalable.

Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases. For Linux, FreeBSD, OpenBSD, Solaris, OSX,etc.

Wmping is a simple usefull program that allows to check host status in your network environment. It can be used for monitoring servers in the network.

OpenLLDP is an Open Source implementation of the IEEE standard 802.1AB Link Layer Discovery Protocol (LLDP). The OpenLLDP project aims to provide a comprehensive implementation of IEEE 802.1AB to help foster adoption of the LLDP protocol.

Implementation of DMTF's DASH initiative. This project includes packages for the server(CIMOM, providers, WSMan based transport layer) and a client SDK. It is designed (but not limited) to run on Raritans OPMA card.

Active dictionary attack on WEP keys in WLAN networks.

The Neighbor Discovery Protocol Monitor (NDPMon) is used by Internet Protocol version 6 network administrators for monitoring ICMPv6 packets. NDPMon observes the local network for anomalies in the function of nodes using Neighbor Discovery Protocol (NDP) messages, especially during the Stateless Address Autoconfiguration. When an NDP message is flagged, it notifies the administrator by writing to the syslog or by sending an email report. It may also execute a user-defined script. For IPv6, NDPMon is an equivalent of Arpwatch for IPv4, and has similar basic features with added attacks detection. NDPMon also maintains up-to-date a list of neighbors on the link and watches all advertisements and changes. It permits to track the usage of cryptographically generated interface identifiers or temporary global addresses when Privacy extensions are enable (default behavior in Ubuntu and Windows for example).

A tool to monitor and analyse data transmitted between clients and a server through a TCP connection. This tool focuses on the data stream (software layer), not on the lower level transmission protocol as packet sniffers do.

Moodss is a modular monitoring application, composed of a GUI and a daemon, which supports any device or process for which a module can be developed. Complete dashboards with graphical viewers, thresholds, SQL database archiving, ... can be managed.

AutoScan-Network is an application designed to explore and to manage your network. Entire subnets can be scanned simultaneously without human intervention. It features OS detection, automatic network discovery, VNC Client, Ssh client

A multi functional tool for port forwarding offers a full matrix of capabilities for selecting network traffic by interface,MAC,IP,TCP,UDP and forwarding it to another interface,MAC,IP,TCP,UDP. Flexible rules allow to change specific attributes of the traffic leaving the rest intact. The port forwarding rules can be imported/exported into XML files. Vivid user interface indicates in real time which rules are triggered by the traffic. The program has its own proprietary traffic management engine (network device driver) which does not make changes to the operating system, instead it simply filters the traffic. Hence, it can work side-by-side with lots of other network and security software.

sntop is a curses-based top-esque console utility for monitoring the connectivity of network hosts, supported features include execution of external file on status change, color support, secure terminal mode, daemon mode, and html generation.

Official releases can be found at https://www.wireshark.org/ Wireshark is a powerful network protocol analyzer developed by an international team of networking experts. It runs on UNIX, OS X and Windows. (Looking for Ethereal? You're in the right place. We switched names in May 2006 due to trademark issues.)

Given SNMP-capable routers and switches, sdig can turn an IP address, DNS/WINS host name or a MAC address into a port description. Sdig will run on most any platform that net-snmp supports. It currently compiles on FreeBSD, Linux and Solaris.

LibIDMEF is an implementation of the Internet Engineering Task Force (IETF), Intrusion Detection Exchange Format Charter Working Group (IDWG), draft standard Intrusion Detection Message Exchange Format (IDMEF) protocol.

Traff sniffs you network interfaces and accounts the traffic on a IP basis. The configuration is very flexible allowing you to create different/multiple accounting rules. The collected data is stored using Mysql, PgSQL, Syslog or files.

MINT allows a network engineer to easly set up multicast sources and recievers to test a multicast network's ability to send and recieve packets. It is particuarly usefull in lab environments.