Open Source Linux Network Monitoring Software - Page 7

Raanan Zion https://au.linkedin.com/pub/raanan-zion/88/7b9/255 ssh Java interface for Unix, Linux and MS Windows system administration and monitoring. Automates firewall rule checks; exporting the results into Excel. Allows you to run multiple Unix commands on multiple servers simultaneously. Captures your network traces (on the port/ports and interface/interfaces of your choice) and at at a click of a button copies them back to your desktop opening. Remotely monitor your servers in a real time dashboard displaying CPU and RAM. Access your servers; this release is integrated with the following 3rd party tools: Remote Desktop (RDP), PuTTY(included) , WinSCP (included) and Wireshark (separate download). Bandwidth and system monitoring. Secure login csv fields encryption MS Windows XP/Vista/7 Linux Red Hat, SUSE, Ubuntu (Debian) [Raanan Zion]

The Nemesis Project is designed to be a command line based, portable human IP stack for UNIX-like and Windows systems. The suite is broken down by protocol, and should allow for useful scripting of injected packets from simple shell scripts.

Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases. For Linux, FreeBSD, OpenBSD, Solaris, OSX,etc.

Wmping is a simple usefull program that allows to check host status in your network environment. It can be used for monitoring servers in the network.

Moodss is a modular monitoring application, composed of a GUI and a daemon, which supports any device or process for which a module can be developed. Complete dashboards with graphical viewers, thresholds, SQL database archiving, ... can be managed.

check_logfiles is a plugin for Nagios which searches for patterns in logfiles. It is capable of scanning multiple logfiles and their rotated ancestors in a single run.

sntop is a curses-based top-esque console utility for monitoring the connectivity of network hosts, supported features include execution of external file on status change, color support, secure terminal mode, daemon mode, and html generation.

GoAccess is a real-time Apache web log analyzer and interactive viewer that runs in a terminal and provides fast and valuable HTTP statistics for system administrators that require a visual report on the fly.

pcapsipdump is libpcap-based SIP sniffer with per-call sorting capabilities. It writes SIP/RTP sessions to disk in a same format, as "tcpdump -w", but one file per SIP session (even if there is thousands of concurrent SIP sessions). Getting started: http://pcapsipdump.sf.net/

MailPing monitors SMTP mail hubs and relays from a user's point of view by sending SMTP messages to the servers that it monitors, looking for the messages to come back (and notifies if they don't), and calculates round trip times.

The Neighbor Discovery Protocol Monitor (NDPMon) is used by Internet Protocol version 6 network administrators for monitoring ICMPv6 packets. NDPMon observes the local network for anomalies in the function of nodes using Neighbor Discovery Protocol (NDP) messages, especially during the Stateless Address Autoconfiguration. When an NDP message is flagged, it notifies the administrator by writing to the syslog or by sending an email report. It may also execute a user-defined script. For IPv6, NDPMon is an equivalent of Arpwatch for IPv4, and has similar basic features with added attacks detection. NDPMon also maintains up-to-date a list of neighbors on the link and watches all advertisements and changes. It permits to track the usage of cryptographically generated interface identifiers or temporary global addresses when Privacy extensions are enable (default behavior in Ubuntu and Windows for example).

Nast is a packet sniffer and a LAN analyzer. It sniff packets and save data in files, checks NIC in promisc mode,build LAN hosts list, find a gw,performs a port scanning, catchs daemon banner etc... It also provides a GTK/ncurses interface.

A tool to monitor and analyse data transmitted between clients and a server through a TCP connection. This tool focuses on the data stream (software layer), not on the lower level transmission protocol as packet sniffers do.

Distributed Nagios eXecutor (DNX) is comprised of, a NEB module, server, and client daemons which allow the check plug-ins to execute across multiple "worker nodes" in a load distribution cluster.

Looking Glass for Cisco,Juniper & Zebra/Quagga routers with AS-name lookups and community name translations (requires PHP+MySQL)

MIB Navigator is a Java-based GUI application for exploring SNMP MIBs and querying hosts running SNMP agents. Rather than providing persistent network monitoring, it serves as a investigative tool. OIDs are represented as nodes in a tree structure.

netleak is a collection of small perlscripts that detects connectivity between network segments. It is mostly useful to detect "leaks" in large organizations that have private network segments physically separated from the Internet.

Passive network application response time monitor utilising libpcap packet capture. Maintains session state tracking host response, network round-trip times and end-point/network congestion. Can be configured for many protocols such as http, telnet...

VA-Cluster Manager is a large scale server monitoring and management tool. Providing a modular architecture for adding new protocols and monitoring technology, VACM is extremely scalable.

Active dictionary attack on WEP keys in WLAN networks.

phpDHCPAdmin Manage the ISC DHCPD Service. Groups, User access levels, PXE, Multiple subnets, lease management, graphing features, classes support, multiple pool support. Built with security, flexibility and usage for large scale dhcp environments

Yconalyzer is a low-overhead pcap utility that provides a bird's eye view of traffic on a particular TCP port, displaying a distribution of duration, volume and throughput over all connections while being able to narrow down to a connection as well.

Devmon is a device monitoring script which works in tandem with the Xymon (formerly Hobbit)/BigBrother monitoring suites. It queries remote hosts via SNMP, applies user-defined logic and thresholds to the acquired data, and submits status and alarms to a display server

PCAP Analyzer is a tool that helps analyzing network traffic captured in a PCAP format (standard of tcpdump). It has extensible Filters in charge of dissecting packets and printing information like throughput or anything that can be analyzed by Filters (e.g. packet loss, reordering, ...). It comes with several built-in Filters but can be expanded by adding custom-made Filters to the classpath. It was developped to help understanding complex network routing problems, where packets could arrive out-of-order, some were lost, or duplicated. Network analysis needed to synchronize capture on a local (destination) and remote (source) computers and display warning messages while recording traffic in PCAP format for offline analysis. PCAPAnalyzer is typically used piped to tcpdump to show warnings on console, with the possibility to replay traffic later, with different Filters.

This project will provide tools that leverage WS-CDL and Pi Calculus to build more robust Service Oriented Architectures (SOA). The tools are now released (and supported) through JBoss Tools (version > 3.2): http://www.jboss.org/tools