.png)
Wireshark (formerly Ethereal) is a network protocol analyzer, or "packet sniffer", that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality packet analyzer for Unix, and the most useful packet analyzer on any platform.
The sysstat package contains the sar, sadf, iostat, nfsiostat, cifsiostat, pidstat and mpstat commands for Linux. The sar command collects and reports system activity information. The information collected by sar can be saved in a file in a binary format for future inspection. (more...)
Nagios is a host and service monitor designed to inform you of network problems before your clients, end-users or managers do. It has been designed to run under the Linux operating system, but works fine under most *NIX variants as well.
The open source Snort Intrusion Detection and Prevention system is the most flexible and widely deployed solution available. Snort is an open source network intrusion prevention system, capable of performing real-time traffic analysis and packet logging on IP networks. (more...)
GKrellM is a single process stack of system monitors which supports applying themes to match its appearance to your window manager, Gtk, or any other theme.
IPTraf is an ncurses-based IP LAN monitor that generates various network statistics including TCP info, UDP counts, ICMP and OSPF information, Ethernet load info, node stats, IP checksum errors, and others.
ZABBIX is all-in-one 24x7 monitoring solution without high cost. ZABBIX is software for monitoring of your applications, network and servers. ZABBIX supports both polling and trapping techniques to collect data from monitored hosts. A flexible notification mechanism allows easy and quickly configure different types of notifications for pre-defined events. (more...)
GNOME Power Manager is a session daemon for the GNOME desktop environment that makes it easy to manage your laptop or desktop system. Depending if you are running a PPC or i386 PC the different power management facilities are vastly different. To get your machine to suspend on lid press is already possible, but is difficult to know what config files to modify. (more...)
Etherape is an etherman, interman and "tcpman" clone. It displays network activity graphically. Active hosts are shown as circles of varying size, and traffic among them as lines of varying width with per-protocol colors. It�s libpcap based. Supports ethernet, fddi, ppp and slip.
Rsyslog is an enhanced multithreaded syslogd. Among others, it offers support for reliable syslog over TCP, RFC 3195, writing to MySQL databases, fully configurable output formats (including great timestamps), remote sender limitation, and flexible filtering on any message content. It is designed as a drop-in replacement for stock syslogd and thus able to work with the same config file syntax. (more...)
Multitail lets you view one or multiple files like the original tail program. The difference is that it creates multiple windows on your console (with ncurses). It can also use colors while displaying the logfiles, for faster recognition of which lines are important and which are not. It supports regular expressions. (more...)
Analyzes and report on system logs LogWatch is a customizable, pluggable log-monitoring system. It will go through your logs for a given period of time and make a report in the areas that you wish with the detail that you wish. Easy to use - works right out of the package on almost all systems. Now analyzes samba logs!.
Toolbox netwox helps to find and solve network problems. It contains 223 tools.
Webminstats is webmin module, designed to store system informations in a (rrdtool) database, and to display historic (hourly, daily, weekly, monthly, custom) graphs on a simple web brower. It is modular in design, as to be able to log everything from CPU usage to email box size. (more...)
Ntop is a network traffic probe that shows the network usage, similar to what the popular top Unix command does. ntop is based on libpcap and it has been written in a portable way in order to virtually run on every Unix platform and on Win32 as well. ntop users can use a a web browser (e.g. (more...)
Arpwatch monitors mac adresses on your network and writes them into a file. last know timestamp and change notification is included. use it to monitor for unknown (and as such, likely to be intruder's) mac adresses or somebody messing around with your arp_/dns_tables.
The Multi Router Traffic Grapher (MRTG) is a tool to monitor the traffic load on network links. MRTG generates HTML pages containing PNG images which provide a LIVE visual representation of this traffic. In addition to a detailed daily view, MRTG also creates visual representations of the traffic seen during the last seven days, the last five weeks and the last twelve months. (more...)
Cacti is a complete network graphing solution designed to harness the power of RRDTool's data storage and graphing functionality. Cacti provides a fast poller, advanced graph templating, multiple data acquisition methods, and user management features out of the box. (more...)
Collectd is a small daemon which collects system information every 10 seconds and writes the results in an RRD-file. collectd collects information about the system it is running on and writes this information into special database files. These database files can then be used to generate graphs of the collected data. collectd itself does not generate graphs, it only collects the data. (more...)
MySQL Squid Access Report, mysar for short, is a reporting system for user web traffic activity, as logged from a squid proxy. MySAR consists of two parts: Command line utilities which import a squid log file in a MySQL database and maintain the databas. A web interface for accessing the reports.
Tcpreplay is a suite of BSD licensed tools for UNIX operating systems which gives you the ability to use previously captured traffic in libpcap format to test a variety of network devices. (more...)
Gospy-applet is a GNOME 2 applet monitoring web pages and servers. It detects changes in page content, page status, page size, page loading time, IP address and so on.
FCHECK 2.07.51 is a very stable PERL script written to generate and comparatively monitor a UNIX system against its baseline for any file alterations and report them through syslog, console, or any log monitoring interface. Monitoring events can be done in as little as one minute intervals if a system's drive space is small enough, making it very difficult to circumvent. (more...)
