analyzer Analyzer is a full configurable analyzer program. It was developed in Win32 environment. It can be used with both Windows 95/98 and Windows NT/2000 platforms. It is composed by three parts: a graphical interface, an analysis engine and a capture program. cheops Cheops is an Open Source Network User Interface. It is designed to be the network equivalent of a swiss-army knife, unifying your network utilities. Cheops does for the network what a file manager does for your filesystem. ciscoconf Ciscoconf automatically fetches configuration from Cisco routers whenever syslog indicates that a change has been made, and stores them under RCS. Cricket Cricket is a high performance, extremely flexible system for monitoring trends in time-series data. Cricket was expressly developed to help network managers visualize and understand the traffic on their networks, but it can be used all kinds of other jobs, as well. IP-Watcher IP-Watcher is a network security and administration tool which gives the user the ability to monitor and control any login session on his or her network. This makes IP-Watcher an extremely valuable tool for investigating suspicious activity, obtaining evidence of misuse, and even for stopping malicious users before they do any damage. ipaudit IPAUDIT can be used to monitor network activity for a variety of purposes. It has proved useful for monitoring intrusion detection, bandwidth consumption and denial of service attacks. ipfm IP Flow Meter is a bandwidth analysis tool, that measures how much bandwidth specified hosts use on their Internet link. iplog iplog is a TCP/IP traffic logger. Currently, it is capable of logging TCP, UDP and ICMP traffic. Adding support for other protocols should be relatively easy. monitord A lightweight (distributed?) network security monitor for TCP/IP+Ethernet LANs. It will capture certain network events and record them in a relational database. The recorded data will be available for analysis through a CGI based interface. Monitoring Tools Watch applications in real time, from your own desktop, as they access files and registry settings on systems throughout your network. Monitoring Tools consists of two modules: Filemon and Regmon Enterprise Edition - that allow you to monitor all file system and registry activity on your local system, or any computer on your network that you can access via TCP/IP. Monitoring Tools runs on any Windows-based system. mtrg The Multi Router Traffic Grapher (MRTG) is a tool to monitor the traffic load on network-links. MRTG generates HTML pages containing PNG images which provide a LIVE visual representation of this traffic. NDiff NDiff compares two nmap scans and outputs the differences. It allows monitoring of your network(s) for interesting changes in port states and visible hosts. NDiff should be useful to network administrators, security analysts, and other interested parties who need to monitor large networks in an organized fashion. NetConsole (Network Operation Center On-Line) NOCOL/SNIPS is a system and network monitoring software that runs on Unix systems and can poll network and system devices. It is capable of monitoring nameservers, web ports, host performance, syslogs, radius servers, BGP peers, etc. New monitors can be added easily (via a C or Perl API). netsaint NetSaint is a program that will monitor hosts and serviceson your network. It has the ability to email or page you when a problem arises and when it gets resolved. nPULSE nPULSE is a web-based network monitoring package for Unix-like operating systems. It can quickly monitor tens, hundreds, even thousands of sites/devices at a time on multiple ports. nPULSE is written in Perl and comes with its own mini web server for extra security. opennms Using JAVA, C, C++, XML, XSL and ODBC, we are building a fully distributed network management platform allowing enterprise and element management capabilities in an open source structure. Read the Bluebird Project Overview for a detailed description of the various parts of the Bluebird Project. PIKT PIKT® is a cross-categorical toolkit for monitoring and configuring systems, organizing system security, formatting documents, assisting command-line work, and performing other common systems administration tasks. scotty-tkined Tkined is a network editor which allows to draw maps showing your network configuration. The most important feature of Tkined is its programming interface which allows network management applications to extend the capabilities of Tkined. Most applications for Tkined are written using scotty. sting sting is a TCP-based network measurement tool that measures end-to-end network path characteristics. sting is unique because it can estimate one-way properties, such as loss rate, through careful manipulation and observation of TCP behavior. In addition, using TCP allows sting to leverage the existing Internet infrastructure -- any TCP server can be used as a de facto measurement service -- and it avoids increasing problems with ICMP-based network measurement (blocking, spoofing, rate limiting, etc). tcpflow tcpflow is a program that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is convenient for protocol analysis or debugging. A program like 'tcpdump' shows a summary of packets seen on the wire, but usually doesn't store the data that's actually being transmitted. In contrast, tcpflow reconstructs the actual data streams and stores each flow in a separate file for later analysis. TCPView Pro TCPView Pro displays the TCP/IP activity on any Windows system. TCPView Pro shows all network connections, messages sent or received, and the applications responsible for them. It also tracks the amount of data sent and received over each connection, and displays which process is associated with each remote TCP/IP address. TCPView Pro is the only monitoring utility that displays TCP/IP activity in real time. the big brother system and network monitor Big Brother is designed to let anyone - from omnicient Sys Admins, to Pointy- Headed Bosses, see how the network is doing in near real-time, from any web browser, anywhere. TTY-Watcher A host security monitor with active countermeasures. It allows the administrator to monitor and control users in real-time on a single host. It's based on IP-Watcher, but is limited to a single machine rather than an entire network. xtacacsd This is a modified version of the Cisco TACACS software enhanced and maintained by Vikas Aggarwal (vikas@navya.com).