Open Source C Network Monitoring Software - Page 4

Using the InterNet Control Message Protocol (ICMP) "ECHO" facility, monitors several hosts, and notify admin if some of them are down.

PADS is a signature based detection engine used to passively detect network assets. It is designed to complement IDS technology by providing context to IDS alerts.

A verbose packet sniffer that displays a great amount of detail on each packet it reads, including application layer fields.

sntop is a curses-based top-esque console utility for monitoring the connectivity of network hosts, supported features include execution of external file on status change, color support, secure terminal mode, daemon mode, and html generation.

raddump interprets captured RADIUS packets to print a timestamp, packet length, RADIUS packet type, source and destination hosts and ports, and included attribute names and values for each packet.

Distributed Nagios eXecutor (DNX) is comprised of, a NEB module, server, and client daemons which allow the check plug-ins to execute across multiple "worker nodes" in a load distribution cluster.

Nast is a packet sniffer and a LAN analyzer. It sniff packets and save data in files, checks NIC in promisc mode,build LAN hosts list, find a gw,performs a port scanning, catchs daemon banner etc... It also provides a GTK/ncurses interface.

gkrellm-imonc is a little statusmonitor for a running fli4l-router for the gkrellm-app

glFlow is a robust, fast, portable, pcap-centric (D)DoS detection tool.

Jnettop allows administrators of routers to watch online traffic coming across the network in a fashion similar to the way top displays statistics about processes. It is useful for quickly evaluating the state of the network.

GoAccess is a real-time Apache web log analyzer and interactive viewer that runs in a terminal and provides fast and valuable HTTP statistics for system administrators that require a visual report on the fly.

ARP digger for multi-interface network neighbours

httest is a script based tool for testing and benchmarking web applications, web servers, proxy servers and web browsers. httest can emulate clients and servers in the same test script, very useful for testing proxys.

The Neighbor Discovery Protocol Monitor (NDPMon) is used by Internet Protocol version 6 network administrators for monitoring ICMPv6 packets. NDPMon observes the local network for anomalies in the function of nodes using Neighbor Discovery Protocol (NDP) messages, especially during the Stateless Address Autoconfiguration. When an NDP message is flagged, it notifies the administrator by writing to the syslog or by sending an email report. It may also execute a user-defined script. For IPv6, NDPMon is an equivalent of Arpwatch for IPv4, and has similar basic features with added attacks detection. NDPMon also maintains up-to-date a list of neighbors on the link and watches all advertisements and changes. It permits to track the usage of cryptographically generated interface identifiers or temporary global addresses when Privacy extensions are enable (default behavior in Ubuntu and Windows for example).

Smtp Relay Checker is a network open mail relay checker. It is muti-threaded so it can be used to scan vast networks quickly, it is fully configurable so it can be adjusted to suit any need, and the scan results can be displayed in HTML. It is intended f

NFSwatch lets you monitor NFS requests to any given machine, or the entire local network. It mostly monitors NFS client traffic (NFS requests); it also monitors the NFS reply traffic from a server in order to measure the response time for each RPC.

Autostatus is a network monitoring program for hosts and services. It is designed to be fast and extremely easy to use. It monitors by icmp pings and by attempting TCP connections to specified ports.

Access Point Utilites for Unix - it's a set of utilites to configure and monitor Wireless Access Points under Unix using SNMP protocol. Utilites knownly compiles and run under Linux, FreeBSD, NetBSD, OpenBSD, MacOS-X, AIX, QNX.

IP accounting tools package based on Berkeley Packet Filer mechanism. Continue from BPFT by V.Vorobyev, TRAFD by V.Belekhov & S.Svirid. Use the PCAP library to implement connection to bpf kernel pseudo-device.

This program detects dhcp servers on a network with dhcpdiscover packets. It can be used for detecting rogue dhcp servers, but it's designed to be small and simple to work with scripts.

EHNT is a tool which turns streams of Netflow (version 5) data into something useful and human-readable. (Netflow is a UDP-based traffic reporting protocol created by Cisco, generated by Cisco, Juniper, Foundry, and other routers.)

ipband a pcap based traffic monitor. It tallies per-subnet traffic and bandwidth usage and starts detailed logging if specified threshold for the specific subnet is exceeded.

Linux bandwidth monitor (bwmon) is yet another utility that measures bandwidth utiliazation per interface basis. It is coded in C and takes advantage of curses library. It runs only on Linux systems since the utility reads /proc/net/dev.

wdiag - a collection of utilities to get DSL stats from Westell DSL modems. It is written in C and and should work on Linux 2.4/2.6 and FreeBSD 4 and higher. It provides line stats, previously only available via the win32-only Westell diagnostic utility.

A collection of Nagios plugins which use SNMP to query devices.