Open Source Networking Software

Impost is a network security auditing tool designed to analyze the forensics behind protocol exploitation.

An easy-to-use Java desktop application to centrally monitor resources from a variety of environments, including the ability to dynamically set up rules to trigger actions based on monitoring. Clients connect via simple and efficient UDP based protocol.

Scanhill is a Microsoft Messenger Protocol Sniffer. Currently it can only intercept Instant Text Messaging. Given that mySQL is used, stored instant messages can be read through a browser interface that is written in PHP language.

Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases. For Linux, FreeBSD, OpenBSD, Solaris, OSX,etc.

Shows who is using the bandwidth on your unix machine in real time. Prints a list of users/procs, bytes in/out/total, local port, remote IP/port, ordered by bandwidth usage. TCP only.

hawKeye, the next generation cyber-surveillance system

my-swatch pretends to be an implementation of msyslog and swatch together. What it pretends to accomplish is put all together, to log events to a remote database (like msyslog) and to awake triggers (like swatch).

a logging system for openbsd's pf. uses postgresql for storage, and is designed to cope with an unreliable network connection to the database.