RFC2123 Traffic Flow Measurement: Experiences with NeTraMet. [c. 1997/03/01]

RFC2063 Traffic Flow Measurement: Architecture. [c. 1997/01/01]

RFC1856 The Opstat Client-Server Model for Statistics Retrieval. [c. 1995/10/01]

RFC1857 A Model for Common Operational Statistics. [c. 1995/10/01]

RFC1272 Internet Accounting: Background. [ 1991/11/01]

Traceroute List & Backbone Maps List - Traceroute List by States Traceroute against Spam Other Traceroute Lists Traceroute Analysis Other Traceroute Resources

comp.protocols.snmp SNMP FAQ Part 1 of 2

See Also

Computer Forensics: High-Tech Law Enforcement ( Lee Garber ; IEEE Computer Magazine 2001-01)

Mapping the Internet ( Hal Burch, Bill Cheswick ; IEEE Computer Magazine 1999-04)

Need Help w/ MRTG & IP Accounting for Windows 2000? [2001/03/29]

Bandwidth Accounting With Unix? [ 2000/10/02]

Unintrusive Traffic Content Monitoring? [ 2000/09/15]

Network Monitoring Tools For Unix? [ 2000/06/09]

Who's Scanning My Box? [ 1999/09/09]

Internet Downtime Reports? [ 1999/09/09]

Worldwide Performance/Usage Monitoring Software? [ 1999/08/21]

MRTG and IP Accounting [ 1999/06/13]

Past and Present Bandwidth Comparisions? [ 1999/03/28]

Tricky IP Accounting [ 1998/08/05]

ping(8) - send ICMP ECHO_REQUEST packets to network hosts {oss}

netstat(1) - show network status {oss}

iostat(8) - report I/O statistics {oss}

traceroute(8) - print the route packets take to network host {oss}

slstats(8) - report slip statistics {oss}

ipfstat(8) - reports on packet filter statistics and filter list {oss}

ipmon(8) - monitors /dev/ipl for logged packets {oss}

pppstats(8) - report statistics for the specified PPP interface {oss}

Network Grep - ngrep strives to provide most of GNU grep's common features,applying them to the network layer. ngrep is a pcap-aware tool that will allow you to specify extended regular expressions to match against data payloads of packets.

smokeping-1.6 - Latency logging and graphing system

pathchar-a1 - LBNL Internet path characterization tool

netqc-1.2.1 - Network Monitoring System based on Net-Snmp

tcptraceroute-1.2 - A traceroute implementation using TCP packets

netmap-0.1.2b - Make a graphical representation of the surounding network

ipfw-graph-1.4 - Graphical overview of traffic going through your IPFW rules

ipex-2.3.4 - Packet examination / dumper utility

icmpmonitor-1.1 - A multiple host icmp monitoring tool

httpgrabber-1.0 - HTTP network traffic grabber and extractor

ehnt-0.3 - A simple Cisco NetFlow data collector

dbench-1.3 - A simulation of the Ziff-Davis netbench benchmark

darkstat-1.1 - Network statistics gatherer, similar to but smaller than ntop

angst-0.4b - An active sniffer

altivore-0.9.3 - A publically disclosed (neither GPL nor open-source) ala Carnivore src

tvark-0.3 - GUI network monitoring tool, tied to a MySQL database

wmnd-0.3.3 - Improved network monitoring dock app (with tons of features)

wmnet2-1.06_2 - A cool network monitor for WindowMaker

p5-IO-Interface-0.97 - Perl extension for access to network card configuration information

trafcount-0.2.1 - Ethernet Traffic Counter

iperf-1.2 - A tool to measure maximum TCP and UDP bandwidth

nat-20 - NetBIOS auditing tool

geotrace-0.0.4_1 - Graphical traceroute utility

ipcad-2.6.2 - IP accounting daemon simulating Cisco ip accounting

wmnetmon-0.2p5 - A host availability monitor intended for the WindowMaker dock

snort-rep-1.7 - A Snort reporting tool that can produce text or HTML from logs

nam-1.0a9 - The UCB/LBNL Network Animator

asmodem-0.6.1 - Displays the modem status, designed to match AfterStep

flowscan-1.006_5 - Processes IP flows recorded in cflowd-format raw flow files

trafd-3.0.1 - The BPF Traffic Collector

ipa-1.2.5 - IP accounting software

tas-1.2.1 - Traffic accounting system

oproute-0.7 - A tool for measuring general performance of the Internet

rmonitor-1.2 - Remote system monitoring utility

p0f-1.8.2_1 - Passive OS fingerprinting tool

siphon-0.666 - Passive host OS identifier using characteristics of sniffed traffic

rid-1.0 - Configurable remote distributed denial of service tool detector

cflowd-2-1-b1_5 - Flow analysis tool used for analyzing Cisco's NetFlow switching

ipfm-0.10.4 - A bandwidth analysis tool

p5-Cflow-1.051 - Analyze raw flow files written by cflowd (Cisco NetFlow data)

ettercap-0.6.4 - A network sniffer/interceptor/injector/logger for switched LANs

netsaint-0.0.7,1 - Extremely powerful network monitoring system

tcpreplay-1.0.1 - A tool to replay saved tcpdump files

tcpstat-1.4 - A program to report various network statistics

icmpquery-1.0.3 - Small utility for finding out time & netmask through ICMP

merlinmon-1.1.1 - A curses app that displays the status of a Novatel CDPD modem device

pchar-1.4 - Sandia Internet path characterization tool

pktsuckers-1.2 - Log contents of unwanted UDP packets and TCP connections

ppptraf-1.0 - A ncurses based PPP Traffic (bytes in/out) monitoring program

sting-0.7 - A tool that measures end-to-end TCP connection characteristics

tcpflow-0.20 - A tool for capturing data transmitted as part of TCP connections

tcpillust-1.0a - A graphical TCP connection analysis tool

tcpview-1.0 - A Motif-based TCP/IP protocol analyzer

gkrellm_snmp-0.14 - A gkrellm SNMP Monitor

nstreams-1.0.0_1 - Analyses network traffic and produces ipfw rules to allow it

wmwave-0.4 - Display 802.11 status in the WindowMaker Dock

wscan-1.00 - A 802.11 wireless visual signal strength meter

xipdump-1.5.4 - Displays ip packets using X window

xprobe-0.0.1p1 - ICMP active OS fingerprint scanner

thcrut-0.1 - Local network discovery tool

ngrep-1.40.1 - Network grep

isic-0.05 - IP Stack Integrity Checker

tethereal-0.9.1 - An X11/GTK network analyzer/capture tool

echoping-4.2.0 - A ping-like program that uses tcp and/or http

fping-2.2b1 - Quickly ping N hosts w/o flooding the network

icmpinfo-1.11 - looks at the icmp messages received by the host

daemontools-0.76_2 - Service monitoring and logging utilities by djb

queso-980922 - Determine the remote OS using simple tcp packets

netperf-2.1.3_1 - Rick Jones' <raj@cup.hp.com> network performance benchmarking package

arpwatch-2.1.a11 - Monitor arp & rarp requests

clog-1.6 - tcp connection logger daemon

mrt-2.2.2a - Multi-threaded Routing Toolkit

nttcp-1.47 - A client/server program for testing network performance

pcnfsd-93.02.16 - Sun PC NFS authentication and printing server.

smbtcpdump-3.4 - Tcpdump(1) hacked to better understand SMB packets

smurflog-2.1 - A program to assist logging of smurf attacks.

strobe-1.06 - Fast scatter/gather TCP port scanner

tcpblast-1.0 - Measures the throughput of a tcp connection.

tcpshow-1.74 - Decode tcpdump(1) output.

tcptrace-6.0.0b2 - A TCP dump file analysis tool

traceroute-991603 - Version of 'traceroute' that shows the AS network number of each hop

trafshow-3.1_1 - Full screen visualization of the network traffic

ttt-1.6 - Tele Traffic Tapper, a network traffic monitoring tool

bro-0.5a - System for detecting Network Intruders in real-time

cops-1.04 - A system secureness checker.

nbaudit-1.0 - NetBIOS Auditing Tool / Security Kit

swatch-3.0.4 - The Simple WATCHer and filter

tua-4.0 - The Uucp Analyzer.

xloadface-1.6.1_1 - Network load monitor for X11

argus-2.0.4 - A generic IP network transaction auditing tool

sniff-1.0 - Program to sniff logins and passwords

ethertop - Monitor network utilization in terms of ``busiest hosts'' {oss}

mtr-0.42.tgz - Matt's traceroute - network diagnostic tool

mtr-0.41.tgz - Matt's traceroute - network diagnostic tool

netwatch - Ethernet Monitor {GPL}

KSniffer - KDE Network Sniffer/Monitor and Stats Collector {x,GPL}

IPTraf - An ncurses-based IP LAN monitor {GPL}

Spong - Simple System/Network Monitoring {GPL}

Angel Network Monitor - A simple yet useful tool to monitor the services on your network {GPL}

mon - Highly configurable service monitoring daemon {GPL}

ippl - IP Protocols Logger {GPL}

jail - Just Another ICMP Logger {Artistic}

ntop - Network usage monitor {GPL}

nmap - Full featured, robust port scanner {GPL}

MyNMS - Simple network monitoring system, useful to detect when links go down (and up!) {PD}

KModem - Displays the status of a modem over aninternet connection using ppp {x,GPL}

KSniff - KDE packet sniffer/analyzer {x,GPL}

knetmon - KDE-aware X frontend for many network tools, especially samba {x,GPL}

mrtg - Multi Router Traffic Grapher {x,GPL}

Ethereal - GUI network protocol analyzer {x,GPL}

SNMP Monitor (Ex) - SNMP critical values monitoring {x,GPL}

xnetload - Displays packet traffic and uptime in an X window {x,GPL}

WMiNET - A dockable applet for monitoring all your inet daemon activity {x,GPL}

iplog - tcp, udp, and icmp logging utilities for Linux. {GPL}

Bandmin - Bandmin is a package that monitors and logs ip accounting data {GPL}

nettest - Notifies you if your network connection goes down audibly or through email {GPL}

LinNeighborhood - Linux Port of Windows Network Neighborhood {x,GPL}

tkchooser - a Macintosh Chooser-like network browser utility that supports multiple protocols (appletalk, smb) with a modular architecture and relies on external plugins to provide client-specific functionality (appleshare,laserwriters) {x,GPL}

KDE - Powerful graphical desktop environment for Unix workstations. {x,GPL}

parse-1.0.tgz - watch a tcpdump trace in real-time

VisualRoute 6.0 Personal Edition

NodeWatch - Monitor and react to TCP/IP network nodes using fping. {GPL}

Big Brother - Highly efficient network monitor {free to use but restricted}

tleds xtleds {unknown}

NOCOL - System and network monitoring software {Freeware}

Tcpdump - A tool for network monitoring and data acquisition. (requires libpcap!) {free to use but restricted}

Sniffit - Full-featured packet sniffer {freely distributable}

statusd - Daemon that allows you to check on your servers from remote hosts {GPL}

BSB-Monitor - Simple, but powerfull network monitor {Freeware}

tdetect-0.2 - Utility for detecting traceroutes and reporting them via syslog

wmnet-1.2 - A network bandwidth monitor intended for the WindowMaker dock

autostatus - A fast, hierarchical network monitoring system {BSL}

Applications and Utilities

py22-pcap-0.3 - Python interface to LBL Packet Capture library (libpcap)

p5-Net-Traceroute6-0.03 - Perl module to parse traceroute6(8) output

p5-Net-Pcap-0.04 - Interface to pcap(3) LBL packet capture library

mod_watch-3.12 - An Apache module to monitor bandwidth usage, for use with MRTG etc

p5-Net-Traceroute-1.03 - Perl module to parse traceroute(8)

ruby-pcap-0.6 - Ruby interface to LBL Packet Capture library (libpcap)

p5-Mon-0.11 - A perl module that supports mon, a network and system monitoring daemon

arts++-1-1-a8_1 - A network data storage and analysis library from CAIDA

libnids-1.16 - Network monitoring library with TCP/IP reassembly

p5-NetPacket-0.03 - Modules to assemble/disassemble network packets at the protocol level

kdebase-3.0_1 - Base modules for the KDE integrated X11 desktop

(The following links to subjects at this site retain your personalized selections.)

See also Communication Configuration - (SNMP, Network configuration and management tools, etc)

See also: Communication Debugging - Status, tracing, and debugging communications and protocols.

See also: Communication Implementation - (low level implementation, multicast, ppp, slip, wrappers,firewalls, et al)

See also: Communication Filtering and Firewalls - Preventing certain types of communication. Communication security, encryption, et al. -

Up to Communications

freshmeat.net : Topic : System : Networking : Monitoring

(Metalab at UNC) /pub/linux/system/network/monitor/ - network monitors and statistics-gatherers