Open Source C Networking Software - Page 3

A suite of tools (a sniffer, a TCP hijacker, an ARP poisoner and a TCP tunnel through ICMP/IGMP packets) created for testing TCP/IP weakness and using them in a non-conventional way. [Up to now I've done only the sniffer-related part]

sentinel is a network traffic monitor. You can monitor specific packets to/from network interfaces, internet protocol addresses and also define specific filters for protocol, port and flag properties of a packet. Output can be directed to database, p

Nuhe is a log monitoring system, which is capable of alarm generation and action when rules are matched against log(s) activity.

The Open Host Monitor provides an open extensible solution to monitoring availability of all aspects of ICT equipment and infrastructure. It makes use of various technologies including SNMP and custom agents running on the target hosts.

ppplog keeps track of your ppp online session costs. It detects online/offline states and automatically calculates costs according to your local phone company. Simplicity and flexibility was key in development.

Analyzes radius proxy servers by monitoring radius packets passed across the server's interface.

Daemon to sit between NAS and RADACCT server and provide an automated spooling service of Accounting information should the server fail to respond. Helps reduce impact of temporary failure of single accounting server

Searches arbitrary text input (logs, etc) for regular expression(s) matching, and then executes arbitrary SQL statement(s) with matched substrings used as parameters. Offers daemon, incremental and transactional features.

Scanhill is a Microsoft Messenger Protocol Sniffer. Currently it can only intercept Instant Text Messaging. Given that mySQL is used, stored instant messages can be read through a browser interface that is written in PHP language.

A portal project providing useful information for those who have the hard job administering a school network. Hints, tips, configurations and special software for servers that can be used in educational environments can be found here.

Shadow Watcher is a Peer to Peer log sharing tool for the security analyst. Consider it a "community watch" program which allows you to keep your system secure from the threats on the internet and help others do the same.

Syslogd2 is a syslog daemon that has been completely re-imagined specifically for use in network environments. It is multi-threaded, scalable and versatile with features designed for both network and host managers. Each Syslogd2 binary is customized from a set of over 20 features at compile-time. It can support input from text files, named-pipes, Linux kernel and user-defined Linux and (both IPv4 and IPv6) IP sockets (both UDP and TCP). It provides a pre-loadable name-cache that can replace DNS services for host-name resolution. Syslogd2 easy-to-use filters use string-matching to select messages which can then be modified, dropped, kept or re-routed (changed to new facilities). Filters are applied to inputs, outputs or both to control msg-routing and network load. Syslogd2 can spool messages on network failure and forward the spooled traffic on network restoration. Please see the wiki on this project site for more on the design features, goals and perspectives of Syslogd2 ...

A daemon that propagates any information you can imagine with easy to write modules over tcp/ip network.

TCP-Beholder is a client/server traffic sniffer with a userfriendly gui.

A daemon that runs as a non-privileged user, sending updates of server status to a set of peers, which can keep state with rrdtool databases. You can specify information elements such as uptime, network counters (pps/bps), diskIO, load, and more.

Trafficlogger is a tiny program which logs your traffic from each device that is listet in /proc/net/dev. It logs all traffic (TCP, UDP,...). It is written in ANSI-C and should compile and work on nearly all Linux distributions.

UNIX billing system, for network servers, voip, etc.

Protowatch is a userspace extension to Linux\'s 2.4 iptables firewalling code. Userspace will dynamically start a server to accept the packet, and log whatever the client sends. Useful for discovering what protocols are in use.

Billing system for PPTP and PPPOE servers.

AIDE - Advanced Intrusion Detection Environment

Apan, Advanced Performance Addon for Nagios, is a tool that is used to store performance-related data from service-checks done by Nagios (www.nagios.org).

`flowstats' is a collection of tools designed to monitor the network traffic of a local machine or a whole infrastructure, thanks to its distributed system. WARNING: this project is in an early stage, don't use it in a production environment.

"GETO" is NIPS system. NIPS is a system which prevent any abnormal network user from access your valuable server.

hawKeye, the next generation cyber-surveillance system