Free network analyser software for linux

Network Traffic Analyser provides a script-driven network traffic monitor.

Network Traffic Analyser (formerly known as sniffer) is designed to be an extremely powerful, configurable, and versatile tool for monitoring network traffic.

It can be used as a plain sniffer, as a tool for accounting, dynamic firewall updates, and many more things.

It features scripting support and an event-driven architecture.

The idea behind this project is to create a powerful tool for playing around with network traffic. The basic concepts are simplicity and flexibility. Instead of building tool that does something specific (and does a good job at it), were trying to build a tool that will be able to do whatever you want it to do (and still be good at it :).

To put it very simply, you write a script that will be invoked for every packet that passes through your network. You write your scripts in a Tcl, fully blown, interpreted programming language. That fact guaranties that you wont be constrained in your creativity.

Deep Network Analyzer is an flexible, open and extensible deep network analyzer (software server) and architecture for gathering and analyzing network packets, network sessions and applications protocols, passively off enterprise class networks.
DNA is designed to be used for Internet Security, Intrusion detection, Network Management, Protocol and Network Analysis, Information Gathering, Network Monitoring applications.
DNA runs as a distributed application under a Java Virtual Machine (JVM) environment and is portable across many OS environments, including: Network appliances, Switches and Routers.
Main features:
- Deep packet and session processing (layers 2-7)
- Configurable processing and output:
- Layer 4 Packet flows
- Layer 4-7 Stateful Sessions flows (client/server flow pairs)
- Layer 7 Packet and Session Application protocol Parsing (HTTP, DNS, P2P, VoIP, etc)
- Application protocol parsing toolkit enables easy devlopment of new new protocol parsers.
- Support for both symmetric and asymmetric routing links.
- Targeting based full session capture facility, like a real time targeted TCPDump.
- Flexible targeting from IP address, port tuple to application sensitive targeting.
- Configurable and extensible output adaptor utilizing OpenAdaptor able to send output to a varity of resources including: Flat file, Oracle, MySQL, MSSQL, Sybase, Sockets, JMS, RMI, WebService.
- Extensible real time collection engine portable across many OS/Packet processing environment :
- Specialized linux drivers mechanisms
- Network Appliances
- Network Switches / Routers
- Highly paralleliszed for increased performance over multi processor environment
- System metadata dictionary externalizes processing type definition
Enhancements:
- Adoption of OpenAdaptor(tm) as the Output Adapter mechanism.
- Support for local-only administration.
- A new targeted packet capture parser, new run scripts, and a new install mechanism.
- Many bugfixes.

Network Tracker application is a user (MAC) tracker daemon, for big LANs (campus).
The Network Trackerd builds a table which records which user is connected on which port of a switch by scanning the devices with SNMP in your inventory which is in a MySQL database. Trackerd keeps that table up-to-date by scanning the network regularly.
Thus, you will have the opportunity to know exactly where a user (MAC, IP, UID) is connected on your network !
Your devices are also checked with ping and SNMP, and you are informed with e-mail when any of the devices is not alive.
More over, you may produce various reports about your network infrastructure on the web (cgi) or by using other tools.
Network tracker eases especially to find and shutdown the switch port of the users, when their PCs on the network start to spread viruses or warms using lots of bandwith; so you are able to stop that kind harmfull traffic on the network.
Main features:
- Collects all the MAC addresses and port numbers from CAM tables of the switches.
- Finds IP addresses of the MACs from ARP tables of the routers.
- Finds LDAP uid of the user.
- Check devices on the network with both ping and SNMP for better reliability.
- The daemon sends 2 self check e-mail per day.
- Developped with C.
Enhancements:
- trackerd is now multi-threaded and works very quickly because a new thread is created for each network device.
- MAC tracking code has been reimplemented for multi-threaded use.
- Wireless access point support has been added.
- gnuplot graphics are prepared, showing the active number of users like MRTG graphs.
- tracker now accepts MAC addresses in free format.

Gnome-Vector-Network-Analyzer is a GTK+/Gnome2 graphical front end for the IW3HEV Vector Network Analyzer, also has a signal generator.
Gnome-Vector-Network-Analyzer displays graphicaly SWR, Phase, Return Loss, X impedance, Serial resistance, |Z| Impedanze, and Inductance, and capacitance.
Enhancements:
- New version with support for the new 180 Mhz miniVNA and the old parallel port 70 Mhz VNA.
- Also with printing capabilities.

Network Security Analysis Tool is a fast, stable bulk security scanner designed to audit remote network services and check for versions, security problems, gather information about the servers and the machine, and much more.

A manpage providing extensive information on NSAT has been included in the distribution. It is available after a make install, or just by typing man doc/nsat.8 from this dir. It is suggested that you inform yourself at least about the -v (scan verbosity) option and edit the configuration file. To learn about changes in this version, please consult doc/CHANGES.

New to this version is support for distributed scanning. The manpage describes how to do a distributed scan. Note that distributed scanning in this version is just a preliminary, proof-of-concept, implementation with no guarantees for its security, reliability, or performance.

Check for updated vulnerability lists, config files, etc. from
http://nsat.sourceforge.net

Currently, these are lists of vulnerabilities:

nsat.cgi (CGI scripts)
nsat.conf (configuration)
src/mod/snmp.h (SNMP community names)

Netleak is a collection of small perlscripts that detects connectivity between network segments. It is mostly useful to detect "leaks" in large organizations that have private networks physically separated from the Internet.


Imagine some large corporation which has an internal development LAN were all sorts of sensitive information is flowing around. This corporation would likely have some very strict rules as to how its employees access the internet or other partner branches in order to
protect its information. For the systemadinistrator this is a daunting task - as the corporate LAN grows keeping track of all the routes through the network becomes extremely difficult. Some routers might simply have been forgotten over time or an employee might have gone wise and connected his own adsl-router or something alike.

Network Leak Finder tries to detect this in a centralized manner by sending out spoofed packets into the internal network and if any packets finds a way onto the external network, a "leak" has been detected. As an anology it works the same way you would find a hole in
a bucket: fill it with water and see if anything leaks.

In most scenarios the external network would be the Internet since everybody should be afraid of what their corporate LANs are leaking to it!

Manage your network with a free Network Monitoring Software application.
Network Management Tool is an organized way to manage your network. 100% web-based network management.
Manage your network devices with ease. 100% Free Network Managment Software! Manage all your network devices, routers, switches, firewalls, hubs, and more.
Enhancements:
- A display bug that occurred when viewing the comments on a device was fixed.