Open Source Python Network Monitoring Software for Linux

OSSIM, AlienVault’s Open Source Security Information and Event Management (SIEM) product, provides event collection, normalization and correlation. For more advanced functionality, AlienVault Unified Security Management (USM) builds on OSSIM with these additional capabilities: * Log management * Advanced threat detection with a continuously updated library of pre-built correlation rules * Actionable threat intelligence updates from AlienVault Labs Security Research Team * Rich analytics dashboards and data visualization

Ganglia is a scalable distributed monitoring system for high-performance computing systems such as clusters and Grids. It is based on a hierarchical design targeted at federations of clusters. Supports clusters up to 2000 nodes in size.

Xplico is a Network Forensic Analysis Tool (NFAT). The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP, MGCP, MEGACO, RTP), IRC, WhatsApp... Xplico is able to classify more than 140 (application) protocols. Xplico cam be used as sniffer-decoder if used in "live mode" or in conjunction with netsniff-ng. Xplico is used also in CapAnalysis: http://www.capanalysis.net

An implementation of the Open Group's Application Response Measurement (ARM) Version 4 standard. The ARM standard describes a means of breaking an application down into it's constituent transactions, and measuring response time across multiple tiers.

Archangel is meant to be a sort of 'improved' version of dansguardian and uses the same default lists as dansguardian. It is basically dansguardian rewritten in python as an ICAP server as opposed to a proxy front-end. The benefits of archangel over dansguardian include: 1. Because it is an ICAP filter, it interfaces with squid and can do HTTPS filtering as well as regular HTTP. 2. Because it uses blocking modules and is written in python, it is extremely easy to write new modules for very complex, intensive blocking. I have already written a module that does content-based blocking of youtube videos. Archangel uses the pyicap library to implement the ICAP functionality. The blockpage requires use of the PHP 5.4.x CLI. In order to do HTTPS filtering, you must first install squid compiled with SSL support and configure it to talk to archangel.

Job Monarch is an addon to the Ganglia Monitoring System that provides batch job monitoring and archiving plus a graphical overview of clusters and assorted batch systems. Fully supported batch system: Torque, PBS and SLURM. Experimental: LSF, SGE

A graphical show of all data from a certain network that will show both normal traffic as well as attacks to and or from a network.

Nagcen - NagiosCenter seperatet.NagiosCenter is a centralized viewer to show data of several (more than one) nagiosserver spreaded in different networks. It uses therefore a parser in python and also an php Mysql webfrontend.

The goals of the project are to empower the Nagios community with Enterprise Performance Monitoring plugins for COTS Applications[Oracle - DB2 - MSSQL - PostgreSQL - Ingres - Weblogic - WebSphere - Jboss - Apache - IIS - DotNet - Documentum - etc] .

NetSV is part of the management/supervision plane and its role is to assist the network administrator when performing an IPv6 network renumbering by supervising the procedure and making diagnostics on the monitore hosts.

PotHead What is it? Pothead: A simple lightweight packet for creating a minimal interaction honeypot How does it work? Magic, Well kinda you don’t need super dupper knowledge to use this! Oops the magic failed ;) a really nice INSTALL.md will be written unfortunately it’s not yet available. 1) Download all the files 2) Check if you got everything 3) Upload and configure the Website and backend (includes/Config.php & the .SQL files) 4) Do not forget to change your APIKEY! 5) Run the python file! Pothead.py -pp 22 23 -site http://YOURSITE.COM/api/write.php -apikey YOURAPIKEY 6) Profit! Is this for anyone? Hmmmm, yes and no I would suggest you know a thing or two about PHP & Python. It’s a pre-release and still in the early alpha stage. Is it safe? It’s pretty safe ;) Does it work? Yeah check it live! http://7ol.eu/view.php

The goal of Xplico is to extract the applications data from an Internet traffic capture. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP), and so on. NFAT

DOGTOWN - Free Software & Tools for administrators ||| please read the Release Notes or docs @ http://dogtown.mare-system.de for a description of each package

fwgraph is an attempt to characterize and present network traffic including network devices, QoS, and iptables under Linux.

This software presents a flexible and configurable proposal for monitoring and management of real and virtual HPC infrastructures, compatible with paradigm of cloud computing. We help you to answer: 1) What is the performance of my resources? 2) What equipment and resources do we have already? 3) What do we need to upgrade or repair? 4) What can we consolidate to reduce complexity or reduce energy use? 5) What resources would be better reused somewhere else? Status: PreAlpha, so any help shall be welcome. Made for LINUX. GNU General Public License version 3.0 (GPLv3)

Control your traffic usage. These scripts currently support the o2 surf@home router II (which does'nt allow to track your traffic usage) only. The scripts consist of the backend, a gnome-applet and a mac-osx applet.