Open Source Perl Network Monitoring Software

BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a web front-end to query and analyze the alerts coming from a SNORT IDS system.

Why to pay tens of thousands $$$ for your network management software? Get visibility into your networks and complex processes inside with NG-NetMS now! NG-NetMS is a new end-to-end network management platform for your Linux servers, Cisco, Juniper, HP and Extreme routers, switches and firewalls. NG-NetMS is precise, quick and efficient. It collects most complete information about the network inventory, topology, map of IPv4 addresses quickly and with minimum hassle. Most important you will be able to collect, process and analyse Syslog events and SNMP alarms both in near-real-time and from the historical archives in a new way. We successfully used NG-NetMS for delivery of network assessment services for our customers worldwide for many years. And now we want to share this unique and fully functional tool with community. It is not capped in terms of performance or number of nodes. The only limit is the hardware you deploy it on. http://www.opt-net.eu/

IP accounting tools package based on Berkeley Packet Filer mechanism. Continue from BPFT by V.Vorobyev, TRAFD by V.Belekhov & S.Svirid. Use the PCAP library to implement connection to bpf kernel pseudo-device.

This is a set of perl and php scripts that are used to collect, process, store and display netflow data.

Traffic Control is a Linux toolbox to control squid, NAT, and other services traffic limits. TF uses Linux iptables to count traffic. This utility consists of two parts. The first is server side (written in Perl) and the second part is the interface.

FWNUA (Free Windows Network User Accounting) runs silently in a Windows login script or GPO and collects data about user logins. FWNUA keeps track of the workstations logins so you don't have to! FWNUA now supports syslog and Splunk! Look for the fwnua - syslog version in the files list. Use Splunk or your own syslog server with data mining tools to create a robust user tracking system. Find our Spunk app on Splukbase: https://splunkbase.splunk.com/app/2773/

What are the packets rejected by your Netfilter based firewall today ? How often this suspicious host try to connect to your box ? What are the most rejected domains ? Who is this strange host which scan your ports ? The responses are in the iptables log

The firewall traffic counter are scripts which are parsing iptables output and writing it to a log file. A PHP script displays grahpical on-the-fly statistics about traffic (summary,email and gameserver traffic). Monthly, daily reporting supported.

This project is dedicated to finding best of breed open source monitoring products, tools, sysadmin tools and overall systems management stuff. We will take all these components and make them work together.

The NetworkLens project provides a flexible alarm capturing, analysis, and reporting system for NOC personnel and/or system administrators. Several different input mechanisms are available, as are customized queries and logging facilities.

The Plague provides a web UI to a MySQL db of parsed syslog data. The focus has been security reporting. The logs supported (so far) are NetScreen firewalls, Cisco routers and switches and PIXen, Gauntlet firewalls.

TrafficCounter for Draytek Routers (TCDR)

my-swatch pretends to be an implementation of msyslog and swatch together. What it pretends to accomplish is put all together, to log events to a remote database (like msyslog) and to awake triggers (like swatch).

php rrd grapher is a complete rrdtool administration website; you will be able to create rrd's, import existing ones, make your own graphs using the interface and much more; it'll support about every rrdtool function.

riman - Router Interface Monitor And Notify NOTE: riman development has ceased, since I discovered Nagios, which does pretty much everything I had in mind for riman :) riman is composed of perl and php scripts that monitor routers via snmp.

SNARLsnmp is a web application monitor for net-snmp 5.0.3 and higher. it actively monitors performance, content, some logic and is capable to even monitor complex web transactions with highly dynamic URLs and many other features