Open Source C Network Monitoring Software - Page 17

A few years ago (ok a LOT) I had written a VERY simple network monitoring system for work. It primarily gathers syslog events, and does a basic TCP connect to check on machine state. This uses MSDE as it's engine for events.

Simmon is SIMple MONitor of network. Dedicated daemon running on router collects traffic data, which is read by gui client. Daemon is fast and light C code build on top of libpcap, and client written in Java Swing can be run on any Java capable platform

A simple C daemon that keeps checking for computer/servers availability, via simple raw protocols (ie: ICMP, HTTP, SNMP) and can take some small actions, like for instance sending a SMTP email.

SipSpy is a distributed monitoring tool for SIP networks. SpyAgents run on each of the nodes to be monitored, and a SipSpy connects to each of these nodes, receiving information and displaying it in real-time for all the SIP packets monitored.

Smart Firewall 0.1 es a program that to control the acces to your own machine is based in neuronal networks like a engine of control ;)

The main task of snal is to detect network sniffers. This is done by analyzing TCP/IP packets and DNS queries.

Snmpstat is SNMP based monitoring system, designed to monitor Routers, Switches, Firewalls and other network devices. CCR is cisco configuration repository which provides change control and automated downloading. Main users - ISP && data centers

The goal of this project is to create a conversion utility to translate custom Snort rules into a format that can be used on Cisco IDS/IPS device.

Snort2c attempts to be a improved version of snort2pf wrote by Stephan Schmieder with some advantages: kqueue, pf table support, pf ioctl's calls and others. It works monitoring snort's alertfile and blocking attackers ip using pf calls.

Splash is the combination of an Active Network (SNAP) and network management extensions based on SNMP. It can process network management requests at the same speed as SNMP, while it also allows for more flexible solutions not possible with SNMP.

This is a microphone spy on TCP. It allow to ear all streaming audio that input to microphone connect to sound card. It was think to spy a bad guy, but can use for any other thing. I've a moral dilemma regarding use it, but I make it for my protection.

Strike HA is inspired from the Linux HA Heartbeat project and Freeha. It is designed to be easy but highly configurable.

stupid-ftpd is an ftp server, which provides a normal ftp-daemon functionality and a command-line mode. It has got a /etc/passwd independent user database which allows many variations of permissions. The server is easy to configure and very flexible.

Bwmonitor Suite is a collection of programs (daemon, client, daemon configurator) that allow a user to view a subnet's bandwidth (inbound and outbound) usage to external hosts in realtime on a scaled plot based on user defined network sniffing rules.

Surfboard is a filtering HTTP 1.1 proxy. It features dynamic filter management through an interactive HTML console, IP tunneling, WindowMaker applets, and a suite of filters.

Syslogd2 is a syslog daemon that has been completely re-imagined specifically for use in network environments. It is multi-threaded, scalable and versatile with features designed for both network and host managers. Each Syslogd2 binary is customized from a set of over 20 features at compile-time. It can support input from text files, named-pipes, Linux kernel and user-defined Linux and (both IPv4 and IPv6) IP sockets (both UDP and TCP). It provides a pre-loadable name-cache that can replace DNS services for host-name resolution. Syslogd2 easy-to-use filters use string-matching to select messages which can then be modified, dropped, kept or re-routed (changed to new facilities). Filters are applied to inputs, outputs or both to control msg-routing and network load. Syslogd2 can spool messages on network failure and forward the spooled traffic on network restoration. Please see the wiki on this project site for more on the design features, goals and perspectives of Syslogd2 ...

Sysmon is a tool to monitorise the state of one or more computers. Its based on a daemon and a php script. The first has to be runned in all boxes you need to check, the second calls the daemon and prints the state into a nice web frontend.

tcpflow captures data transmitted as part of TCP connections (flows), and stores data in a way that is convenient for protocol analysis or debugging. tcpflow understands TCP sequence numbers and will reconstruct data streams regardless of retransmissions.

TCP-Beholder is a client/server traffic sniffer with a userfriendly gui.

TIMS is a multithread-capable high speed TCP & ICMP network scanner and reverse-DNS resolver aiming at scanning very large ranges of IP addresses in a short amount of time. Thread number, timeouts and delay values are highly configurable.

TRAP is a very innovative and advanced transparent proxy that verifies the integrity of your network communication. It offers a custom scripting language that allows the user full control over the decision making process.

TCPUnique is a tool for realtime display of unique hosts on your network matching a tcpdump-style filter expression.

A software distribution based on Debian/Linux to provide network diagnostics, security monitoring and intrusion detection. The distribution can be easily installed by office personnell.

A daemon that runs as a non-privileged user, sending updates of server status to a set of peers, which can keep state with rrdtool databases. You can specify information elements such as uptime, network counters (pps/bps), diskIO, load, and more.

Ungoliant is a system utilizing open-sourced backends to isolate problematic (virus-infected or otherwise) hosts from a network. Focuses on vpmsd, snort, and nmap for detection and containment.