EtherApe is a graphical network monitor for Unix modeled after Etherman.
Featuring link layer, IP and TCP modes, it displays network activity
graphically. Hosts and links change in size with traffic. Color coded
protocols display. It supports Ethernet, FDDI, Token Ring, ISDN, PPP,
SLIP, and WLAN devices, plus several encapsulation formats. It can
filter traffic to be shown, and can read packets from a file as well as
live from the network. Node statistics can be exported.
fprobe: a NetFlow probe - libpcap-based tool that collects
network traffic data and emit it as NetFlow flows towards the
specified collector.
The icmpmonitor uses the Internet Control Message Protocol (ICMP) "ECHO"
facility, monitors several hosts, and notify admin if some of them are
down.
A small utility for finding out time & netmask through ICMP.
The ipacctd is intended for IP accounting. divert(4) and corresponding
ipfw(8) rules are used for obtaining IP packets.
Would you like to summarize and/or log network activity down to the ip address
and port level of detail, but not record every packet?
Ipaudit provides that ability.
Ipaudit listens to a network device in promiscuous mode, and records of every
'connection', each conversation between two ip addresses. A unique connection
is determined by the ip addresses of the two machines, the protocol used
between them and the port numbers (if they are communicating via UDP or TCP).
It uses a hash table to keep track of the number of bytes and packets in both
directions. When ipaudit receives a signal SIGTERM (kill) or SIGINT (kill -2,
usually the same as a Control-C), it stops collecting data and writes the
tabulated results.
Ipaudit is built using the pcap packet capture library to read the network port
from LBNL Network Research Group.
Nagircbot is an IRC bot that monitors Nagios's status file for changes and
announces those in an IRC channel. It can also change the topic of the channel
to reflect current status.
Lanmap sits quietly on a network and builds a picture of what it sees.
NeDi is a lightweight network management framework, which is based on a
scheduled discovery, an SQL backend, and a web-based user interface. It
sucks information through SNMP or CLI from your switches and routers and
stores information (such as MACs and IPs) in a MySQL database.
Later, you can use its web interface to easily locate nodes withing your
network.
多路由器流量记录仪(MRTG)是一个监控网络链路流量负载的工具。MRTG 生成
包含 PNG 图片的 HTML 页面,实时地以可视化的方式展现流量。查阅
获得示例。MRTG 基于 Perl 和 C,可工作于 UNIX 和 Windows NT。
MRTG 已成功用于很多网站。
参见 MRTG-Site-Map:
http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/users.html