Free network magic software for linux

IP Tables network magic SysRq is a new iptables target that allows you to do the same as the magic sysrq key on a keyboard does, but over the network.

Why to use the remote sysrq?

Sometimes a remote server hangs and only responds to icmp echo request (ping). Every administrator of such machine is very unhappy because (s)he must go there and press the reset button. It takes a long time and its inconvenient. So here is a solution. Use the Network Magic SysRq and you will be able to do more than just pressing a reset button. You can remotely sync disks, remount them read-only, then do a reboot. And everything comfortably and only in a few seconds.

Is it secure?

That depends. Let me explain: You can restrict who can do this by setting the iptables firewall. But unfortunately, for simplicity, the Network Magic SysRq is based on a single packet request. This packet is encrypted and password protected, but if somebody can sniff it (s)he will be able to repeat (but not to change) the query (so-called replay attack). The query is also protected by a timestamp. When the packet is generated, it is stamped by current date and time. Then on the server side that stamp is compared with the current time of the server and if it is within the tolerance the request is accepted. Together with some other information, the timestamp is protected by SHA1 hash. This means that the potential attacker has a limited time to repeat the sniffed packet. If anybody requires a better security than this, some secure encrypted tunnel can be used. (not depending on userspace, of course!

How to install it?

Just type make.

When everything is compiled type make install as root and after that run depmod -a. Now you can load the kernel module by the command modprobe ipt_SYSRQ.

You would also like to configure the server password and the tolerance. This can be set when installing the module into a kernel, by specifying the module parameters passwd for password and tolerance for tolerance in seconds. The default values are passwd="" and tolerance=43200.

Example:

modprobe ipt_SYSRQ passwd="my_very_secret_password" tolerance=3600

Module options can also be specified in file /etc/modules.conf.

Example:

options ipt_SYSRQ passwd="my_very_secret_password" tolerance=3600

What to do on a server?

After the module is loaded you are able to deploy it using the iptables command.

Some examples of usage:

iptables -I INPUT -p udp --dport 9 -j SYSRQ

or

iptables -I INPUT -i eth1 -s 192.168.1.2 -p udp --dport 9 -j SYSRQ

Note that UDP port 9 is used. This is the default port for send_sysrq program, which shouldnt do any harm, as it defaults to discard service.

What to do on the remote machine?

Copy the executable binary send_sysrq to the remote (client) machine. Alternatively, you can compile ipt_sysrq there yourselves. After uncompressing the source package, you just need to do a make send_sysrq.

Now you can use the client program send_sysrq to send the sysrq request.

Network Tracker application is a user (MAC) tracker daemon, for big LANs (campus).
The Network Trackerd builds a table which records which user is connected on which port of a switch by scanning the devices with SNMP in your inventory which is in a MySQL database. Trackerd keeps that table up-to-date by scanning the network regularly.
Thus, you will have the opportunity to know exactly where a user (MAC, IP, UID) is connected on your network !
Your devices are also checked with ping and SNMP, and you are informed with e-mail when any of the devices is not alive.
More over, you may produce various reports about your network infrastructure on the web (cgi) or by using other tools.
Network tracker eases especially to find and shutdown the switch port of the users, when their PCs on the network start to spread viruses or warms using lots of bandwith; so you are able to stop that kind harmfull traffic on the network.
Main features:
- Collects all the MAC addresses and port numbers from CAM tables of the switches.
- Finds IP addresses of the MACs from ARP tables of the routers.
- Finds LDAP uid of the user.
- Check devices on the network with both ping and SNMP for better reliability.
- The daemon sends 2 self check e-mail per day.
- Developped with C.
Enhancements:
- trackerd is now multi-threaded and works very quickly because a new thread is created for each network device.
- MAC tracking code has been reimplemented for multi-threaded use.
- Wireless access point support has been added.
- gnuplot graphics are prepared, showing the active number of users like MRTG graphs.
- tracker now accepts MAC addresses in free format.

Network FIFO project is a network object that provides data transfering tunnel across network in first in/first out manner.

Simply put,

fifo server file is: monotech_fifo.pl
This script require Net::Server::NonBlocking at least 4.1(you can grab from CPAN)

% perl monotech_fifo.pl < address > < port >

and itll show up like this:

[root@WongWai monotech_fifo]# perl monotech_fifo.pl 192.168.3.52 12000
Listen on 192.168.3.52:20005
Listen on 192.168.3.52:12000

12000 is the port in which the fifo resides.
20005 is the port in which backoffice management resides.

--------------------------------------------------

port 20005 in which the management control resides can be accessed by "admin.pl"

% perl admin.pl < address >

for example

perl admin.pl 192.168.3.52

itll show something like this:

message>

where you can type some commands and press enter

the commands are:

message>readers
message>flush

(flush is the command that read all socket buffer of the admin client socket)

to show all reader in the fifo, it is very useful when some reader is connection disconnected by his ISP or readers machine hangs, the fifo will hold his connection forever (It is because the monotech_fifo.pl doesnt set SO_KEEPALIVE and TCP_KEEPALIVE which will be fixed in the future)

and

message>kill_reader[tab]< fifo name >

to kill any connection of < fifo name >

This package is heavily used by my company, so it is likely reliable.

This program will help you to view network activity on your network device such as eth0, ppp0 and so on.

It put animated, graduated, icons near the KDE tray.

KDE Network Mapper is a network discovery, probing, and scanning tool. It is a KDE GUI for nmap.
Individual hosts or entire subnets can be scanned simultaneously, and the results are shown in the interface as queries finish, so the user neednt wait for the entire scan to finish.
Main features:
- Save to/Load from simple XML format.
- NMap Scanning.
- NMap XML Import.
Enhancements:
- Removed KDE 3.1 support...seriously, upgrade.
- Migrated to UIC for the prefs, more UIC coming soon.
- Refactored the host info page.
- We have graphics now!
- Near full revamp of nmap code, new parsing, scanning, and presentation.
- The automake code is less braindead now.
- Stability has increased overall, as well as usefullness.
- Seriously, soo many changes, if you want the details, than diff -Naur it.

Manage your network with a free Network Monitoring Software application.
Network Management Tool is an organized way to manage your network. 100% web-based network management.
Manage your network devices with ease. 100% Free Network Managment Software! Manage all your network devices, routers, switches, firewalls, hubs, and more.
Enhancements:
- A display bug that occurred when viewing the comments on a device was fixed.

Network Probe and protocol analyzer is the ultimate tool for traffic-level network monitoring, troubleshooting, analysis,
If your network is crawling to a standstill, and you suspect there might be a problem with the network traffic, Network Probe will quickly help you identify what is causing the problem, show you who is generating any troublesome traffic, and where the traffic is being transmitted.
Network Probe will collect traffic statistics for all protocols, hosts, and conversations on your network, and show you all the top talkers and listeners on your network. Hosts generating large amounts of traffic such as music and movie streaming, playing online games, or listening to streaming media are easily identified.
Main features:
- Watch in real time which protocols are used on your network
- Watch in real time which hosts are active on your network and the Internet
- Watch in real time which conversations are taking place on your network and to and from the Internet
- Watch in real time detailed protocol statistics per host
- Watch in real time detailed protocol statistics per conversation
- Watch in real time network card details for your network
- Watch traffic amount of selected entries relative to the total and filtered traffic
- Watch traffic amount over time for any host, conversation, and protocol
- Watch in real time network throughput for the entire network segment
- Inspect detailed logged statistical data from days and weeks earlier
- Filter out and search for selected protocols, hosts, conversations, and network cards
- Sort network traffic by amount of data transmitted or received
- Export network traffic statistics data
- Configure users with restricted access to statistical data
- Password protected login