Network Monitoring

From ChekMate Security Group

Contents

FTP

  • Autobuf http://dast.nlanr.net/Features/Autobuf_v1.0/ is an auto tuning-enabled FTP client and server. The client, a modification of the NcFTP Client, enables Auto Tuning to calculate optimal window sizes before files are transferred. The client is compatible with most other FTP servers. The server, a modification of the WuFtp FTP server, allows connecting clients to reset its buffer size dynamically by using a SITE option.
  • bbcp http://www.slac.stanford.edu/~abh/bbcp/ a secure peer to peer file copy program supporting large windows and multiple streams. See also the presentation and the PDF paper.
  • bbftp http://ccweb.in2p3.fr/bbftp/ is designed to quickly transfer files across a wide area network. The package comprises of a server and clients. It also provides compression and secures the transmission of the username and password by using the cryptolib of the OpenSSL project.
  • Firehose http://heroinewarrior.com/firehose.php3 Firehose uses multiple interfaces to stripe a bulk data transfer (it's geared towards files, the home-grown protocol includes sending a filename and the client requires a file) over multiple network interfaces.
  • GSIFTP http://www.globus.org/security/v1.1/ftp/install.html is an ftp client and server with built in kerberos and GSI (globus) security, and also allows you to set the TCP buffers on both the client and server.
  • SafeTP http://www.cs.berkeley.edu/~smcpeak/SafeTP/ operates by installing a transparent proxy in the Windows networking stack which detects outgoing FTP connections from any Windows FTP client, and silently secures them using modern cryptographic techniques.
  • NcFTP http://www.ncftp.com/ has a popular free FTP client that adds support for firewalls, intelligent ls caching, background and scheduled processing, and Microsoft Windows.
  • RFT http://www-unix.mcs.anl.gov/~madduri/RFT.html Reliable File Transfer Service is a service that allows byte streams to be transferred in a reliable manner. Reliability, in this context, means that problems of less than a certain, user defined magnitude are dealt with automatically. i.e. problems like dropped connections, machine reboots, temporary network outages, etc are dealt with automatically (usually via retry) until they either resume or meet some "ultimate failure" condition
  • WU-FTPD http://www.wuftpd.org/ is a popular FTP server from Washington University.

Mapping

Monitoring Infrastructures

  • Cheops http://www.marko.net/cheops/ is an Open Source Network User Interface designed to unify your network utilities.
  • CycleTraders http://www.cycletraders.com/, is a cooperative network of users that gather critical information about the status of each other's website.
  • Ganglia http://ganglia.sourceforge.net/ is a scalable distributed monitoring system for high-performance computing systems such as clusters and Grids.
  • Mon http://www.kernel.org/software/mon/ is a general-purpose resource monitoring system, which can be used to monitor network service availability, server problems, environmental conditions such as the temperature in a room, or any number of things.
  • Nagios http://www.nagios.org/ (used to be NetSaint) is an open source host, service and network monitoring program. It is designed to run under Linux, although it should work under most other *NIX variants. It can run either as a normal process or as a daemon, intermittently running checks on various services that you specify. The actual service checks are performed by external "plugins" which return service information to Nagios. Several CGI programs are included with Nagios in order to allow you to view the current service status, history, etc. via a web browser.
  • NetMeter http://www.ccaba.upc.es/netmeter/ This application provides an integrated graphical interface for a set of tools that allows the measurement of QoS parameters over IPv4 and IPv6 networks. Network Performance Meter (netmeter) is an Tcl/Tk application which tries to solve these tasks in a flexible and modular way.
  • Network Performance Advisor http://dast.nlanr.net/Projects/Advisor/ is a single application which integrates the measuring, analyzing, and displaying of network performance statistics.
  • NIMI http://www.psc.edu/networking/nimi/welcome.html
  • OSSMON http://www.crystalballinc.com/vlad/software/ossmon/ is a web-based monitoring package based on OSSWEB application framework. It supports SNMP monitoring as well as specific services like POP3, SMTP, Ping.
  • PingER http://www-iepm.slac.stanford.edu/pinger/ End-to-end active measurement using ping to monitor end-to-end performance of Internet links.
  • SCAMPI http://www.ist-scampi.org/ SCAMPI is a platform for passive monitoring. It can use several different hardware monitoring adapters (SCAMPI adapters developed in the project, DAG cards produced by Endace and regular NIC cards). It provides MAPI (Monitoring API) as a high-level abstraction of passive monitoring for easy creation of portable monitoring applications.
  • Scriptroute http://www.cs.washington.edu/research/networking/scriptroute/ is a flexible network measurement and debugging system. Measurements are expressed as scripts that run as an ordinary user, and a priviledged daemon schedules and manages the packet exchange. The goal is to allow any user to connect to any server and execute any safe network measurement.
  • Website Monitoring http://checkwebsite.org/ is a free website monitoring application released under the GPL that provides an uptime monitoring tool.
  • Wombat http://wombot.net/ monitors the availability and operation of websites. When your website goes down or produces a defineable error, WOMbot will automatically notify you via SMS and Email.

Path Characterization

Ping

RRDtool

(Round Robin Database tool) is a system to store and display time-series data.

  • Bronc http://bronc.blueaspen.com/ is a package of utilities that allow you to gather and visualize data in the form of graphs. It uses RRD and is similar in function to Cricket and MRTG, though it is claimed to be faster.
  • Cricket http://cricket.sourceforge.net/ is a high performance, flexible system for monitoring trends in time-series data. The collector runs from cron every 5 minutes (by default), and stores data into a file-based database managed by the RRD Tool. Later, when you want to check on the data you have collected, you can use a web-based interface to view graphs of the data.
  • Host Grapher II http://software.foxlink.org/hostgrapher2/ is a light program that uses RRD to draw graphics of Hosts for Network, Processes, CPU, Memory etc. Writing addicional plugins is quite simple. Works on all major UNIX platforms and on win32.
  • NMIS http://www.sins.com.au/nmis/ Network Management Information System is an SNMP polling and statistics viewer front-end to Tobi Oetiker's RRDTool.
  • Orca http://www.orcaware.com/orca/ is a tool useful for plotting arbitrary data from text files onto a directory on a Web server.
  • remstats http://remstats.sourceforge.net/release/releasenotes.html Remstats is a system of programs to: gather data from servers and routers, store and maintain the data for long periods, produce graphs and web-pages tieing them together, and monitor the data for anomalous behavious and issue alerts. This software is a pretty good hack to wrap around rrdtool as collector and presenter, easy to set up with not to much prerequesits. It only needs a some perlmodules and perl. Its under GPL and is able to maintain and monitor big environments.
  • SmokePing http://people.ee.ethz.ch/~oetiker/webtools/smokeping/ measures latency and packet loss in your network. Uses RRDtool to maintain a longterm datastore and to draw pretty graphs giving up to the minute information on the state of each network connection.

SNMP

Throughput Tools

Traceroute