Open Source Linux Network Monitoring Software

FlowViewer provides a convenient web-based user interface to Mark Fullmer’s flow-tools suite and CMU's netflow data capture/analyzer, SiLK. The inclusion of the underlying SiLK tool set enables FlowViewer users to continue to use the tool with the newer IPFIX netflow data protocol, which includes support for IPv6 and Cisco's v9 and FNF netflow. FlowViewer has been developed for NASA’s Earth Sciences Data and Information System (ESDIS) networks, and credit goes to NASA for their usual outstanding support of innovation. The FlowViewer tools provide additional graphing and tracking features by utilizing open source software including Thomas Boutrell’s gd, Lincoln Stein's GD, Martien Verbruggen's GD::Graph, and Tobias Oetiker’s RRDtool. FlowViewer v4.6 fixes non-UTC local time environments for FlowViewer and FlowGrapher, and $no_devices_or_exporters FlowMonitor_Collector problem. **Note: SiLK must be v3.8.0 or later. Version 3.9 handles sFlow data.

======================== Extra! Extra! Read all about it! The next generation of YFi Hotspot Manager is now available. It is called RADIUSdesk and packed with goodies. https://sourceforge.net/projects/radiusdesk/ =========================== Modern Ajax web front-end for FreeRADIUS 2.x. Supports: vouchers, permanent users, billing post paid and pre-paid. Multi language support. Stats. Works with CoovaChilli and Mikrotik. Runs on Ubuntu and CentOS. Thorough documentation. Can be downloaded as a virtual appliance in order to be up and running within minutes. Can be used as a standard RADIUS server.

Gerix WiFi cracker is a Backtrack program to crack WiFi. The main advantage of this program is that it has a graphical user interface. So that even newbies can easily hack a WiFi without the need of any command line knowledge.

Easily turn a Ubuntu-based computer into a full linux router, complete with dhcpd, named/bind, iptables firewall, and packet inspection of the network traffic being routed. Deep packet inspection for layer 2 (mac), layer 3 (ipv4, ipv6), layer 4 (icmp, tcp, udp), and layer 7 (application-specific). Summary of network flows and all layers of inspected traffic is stored in a database at 1-second intervals. This database is then mined to drive the Apache/PHP web interface.

A SNMP agent for management of MPLS for Linux software, following RFC 3813 (MPLS-LSR-STD), RFC 3814 (MPLS-FTN-STD) . Based on Net-SNMP framework and written in C.

BGPHist is a tool that able to get MP-BGP updates, decode it, and write to the backend storage for logging and monitoring purposes. It support not only internet routes, but also these address families: 1. ipv4 multicast 2. ipv4 labeled unicast 3. vpnv4 unicast 4. ipv6 unicast 5. ipv6 labeled unicast 6. vpnv6 unicast 7. l2vpn vpls-vpws 8. ipv4 mvpn Backend storages supported - text output, MySQL database and Oracle database. For MySql backend there is also a simple PHP frontend. Possible usages: 1. Monitor and log ISP's customers activity for Internet and VPNs. 2. Use as a passive BGP looking glass for all possible VPNs and Internet. 3. Backend for some external monitoring and accounting system. BGPHist should be connected to the BGP route reflector as a client to get all routing updates. It does not have code to generate BGP update messages, it's only a listener.

BigPlg allows the collection of the IPv4 Internet routing table which may be viewed by service providers and/or ISP customers to validate IP routing across autonomous systems. Routing updates may also have attributes aliased to become (graph) readable. This function exists to allow the exporting of RIB updates to Splunk, or any such data collector. A beneficial side-effect of collecting BGP routing information is the ability to track BGP updates/events local or remote(upstream). To analyze events Splunk is supported. A JSON/Socket API is currently under development. Custom graphs can be easily implemented if taken the time to do so. There's certainly no need to rely on Splunk if one developed another way of displaying data. This project is meant to be nothing more than a route collector, and it's interface is solely CLI(command line interface). This project does not have graph data "out of the box".

CLI based, recursive mapping/discovery of network devices via SNMP(CDP/OSPF/BGP MIBs). SNMP(LLDP MIBs), telnet, and SSH are to follow, along with multi-vendor support (right now only supports cisco devices). Requires Perl and Net::SNMP, Net::SSH, and Net::Telnet modules.

Redlink is a script designed to provide link redundancy for a Linux router with two links. It automatically identifies the availability of the links and manages routing rules in order to keep the router and the LAN behind it with internet access.

Tiet reads pcap(3) or argus(8) routing protocol traces (ISIS for now) and analyzes the protocol state/behavior. The obtained metrics & graphics can by used for many auditing tasks, e.g. detection of misconfiguration, bugs or performance problems.

NetMon_Cisco_to_SQL.py is a basic network performance monitoring and logging script for Cisco devices. It gathers parameters (CPU Utilization, Used Processor Memory, Used IO Memory, UP Ethernet Interfaces density, in percent velues) from Cisco routers by parsing command outputs and exports them to a MySQL database. NetMon_Query.py is a query script for the MySQL database in the form of an interactive menu for generating statistics. Tools used for coding and testing: Python 2.7.3, MySQL Server 5.5.37, GNS3, Linux. Tested on Cisco 1710, 2621, 2691, 3660, 3725, 7206

OSPF_SNMP_v1.0.py is an OSPF network discovery script. It allows the discovery of all OSPF network devices in the network, without connecting to each of them or knowing all their IP addresses. The user must provide the IP and SNMP community string of a single OSPF device in the network (for example, a device in the core) and the script searches for all other OSPF routers. Prior to running the script, the user should configure SNMPv2 community string on the device and also include the subnet between his PC and the router into the OSPF process, so he has IP connectivity to all other OSPF nodes. After providing necessary info and the OSPF info is gathered, the user has three choices: display the OSPF routers info on the screen, export the data to a file for Excel importing and generate the OSPF topology showing neighborships, router IDs and neighbor IPs. Tools used for coding and testing: Python 2.7.3, PySNMP, GNS3, Linux. Tested on Cisco 2621, 2691, 3660.