RRDBot is an SNMP polling daemon which writes the polled values to an RRD
database. It can poll many different SNMP sources in an efficient manner.
It has no large external dependencies, and its configuration is stored in text
files. It has full support for MIB definition files and using textual MIBs
instead of numerical OIDs.
A nice feature is the querying of SNMP tables without using a specific index.
Indexes of the rows in an SNMP table may change from time to time, and are less
than ideal for long term tracking of a given value. For example RRDBot can
query the traffic on your router based on the 'xl0' interface name.
RRDBot also contains tools to simplify the creation of RRD files, and the
various archives contained in them.
Softflowd is flow-based network traffic analyser capable of Cisco NetFlow
data export. Softflowd semi-statefully tracks traffic flows recorded by
listening on a network interface or by reading a packet capture file.
These flows may be reported via NetFlow to a collecting host or summarised
within softflowd itself.
Visage is a web interface for viewing collectd statistics. It also provides a
JSON interface onto collectd's RRD data, giving you an easy way to mash up the
data.
flowd is a small, fast and secure NetFlow collector. It offers the following
features:
* Understands NetFlow protocol v.1, v.5, v.7 and v.9 (including IPv6 flows)
* Supports both IPv4 and IPv6 transport of flows
* Secure: flowd is privilege separated to limit the impact of any compromise
* Supports filtering and tagging of flows, using a packet filter-like syntax
* Stores recorded flow data in a compact binary format which supports
run-time choice over which flow fields are stored
* Ships with both Perl and Python interfaces for reading and parsing the
on-disk record format
* Is licensed under a liberal BSD-like license
Sipcalc is an ip subnet calculator.
Features:
IPv4 -
* Retrieving of address information from interfaces.
* Classful and CIDR output.
* Multiple address and netmask formats (dotted quad, hex, number of bits).
* Output of broadcast address, network class, Cisco wildcard, hosts/range,
network range.
* Output of a userdefined number of extra networks.
* The ability to "split" a network based on a smaller netmask,
now also with recursive runs on the generated subnets.
* DNS resolution.
IPv6 -
* Compressed and expanded input addresses.
* Compressed and expanded output.
* Standard IPv6 network output.
* Reverse dns address generation.
* The ability to "split" a network based on a smaller netmask,
now also with recursive runs on the generated subnets.
* DNS resolution.
super_mediator is an IPFIX mediator designed to split IPFIX sensing flows
and distribute the network telemetry information to multiple sources. It
can export the network telemetry data gathered into formats designed for
bulk loading into databases (e.g. MySQL) or as JSON outputs, as well as
directly loading MySQL tables. super_mediator is primarily designed to get
network telemetry data from YAF.
tcptrack is a sniffer that displays information about TCP connections it
sees on a network interface. It passively watches for connections on the
network interface, keeps track of their state, and displays a list of
connections in a manner similar to the UNIX top(1) command. It displays
source and destination addresses, ports, connection state, idle time, and
bandwidth usage.
coWPAtty is designed to audit the security of pre-shared keys
(PSK) selected in WiFi Protected Access (WPA) networks.
Whatmask is a small C program that will help you with network settings.
It displays the following information given IP address and/or netmask:
- The netmask in the following formats: CIDR, Netmask, Hex, Wildcard Bits
- The Network Address
- The Broadcast Address
- The number of Usable IP Addresses
- The First Usable IP Address
- The Last Usable IP Address
py-flowtools extension module gives you a simple python interface
to NetFlow data as stored by Mark Fullmer's flow-tools package.
It contains a class FlowSet which reads the data from a given file
(or from standard input). A FlowSet provides an iterator interface
to access the individual flow records as instances of a second
class called Flow. A Flow provides access to its data through
attribute references.