Search Results for "linux kernel"

netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa. Our toolkit can be used for network development and analysis, debugging, auditing, or network reconnaissance.

Osquery is an operating system instrumentation framework for Windows, OS X (macOS), Linux, and FreeBSD. The tools make low-level operating system analytics and monitoring both performant and intuitive. Osquery exposes an operating system as a high-performance relational database. This allows you to write SQL queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser plugins, hardware events or file hashes.Osquery queries your devices like a database. ...

...It is multi-threaded, scalable and versatile with features designed for both network and host managers. Each Syslogd2 binary is customized from a set of over 20 features at compile-time. It can support input from text files, named-pipes, Linux kernel and user-defined Linux and (both IPv4 and IPv6) IP sockets (both UDP and TCP). It provides a pre-loadable name-cache that can replace DNS services for host-name resolution. Syslogd2 easy-to-use filters use string-matching to select messages which can then be modified, dropped, kept or re-routed (changed to new facilities). ...

Understand your application quickly by seeing it in a real-time interactive display. Pick open-source or cloud-hosted options. Weave Scope automatically detects processes, containers, hosts. No kernel modules, no agents, no special libraries, no coding. Seamless integration with Docker, Kubernetes, DCOS and AWS ECS. See your Docker hosts, containers and services in real-time. Easily identify and correct issues to ensure the stability and performance of your containerized applications. View...

Package github /asavie/xdp allows one to use XDP sockets from the Go programming language. With the default UDP payload size of 1400 bytes, running on Linux kernel 5.1.20, on a tg3 (so no native XDP support) gigabit NIC, sendudp does around 980 Mb/s, so practically line rate. TL;DR: in the same environment, sending a pre-generated DNS query using an ordinary UDP socket yield around 30 MiB/s whereas sending it using the senddnsqueries example program yields around 77 MiB/s. Connecting a PC with Intel Core i7-7700 CPU running Linux kernel 5.0.17 and igb driver to a laptop with Intel Core i7-5600U CPU running Linux kernel 5.0.9 with e1000e with a cat 5E gigabit ethernet cable.

# OBSOLETE The project has moved to CodeBerg at https://codeberg.org/IPMITool/ipmitool IPMItool provides a simple command-line interface to IPMI-enabled devices through an IPMIv1.5 or IPMIv2.0 LAN interface or Linux/Solaris kernel driver.

ipt-netflow is high performance NetFlow exporting module for Linux kernel (up to 4.15). Designed for Linux router in high-throughput network. This is netfilter/iptables module adding support for -j NETFLOW target. Designed to work efficiently w/o conntrack. Supporting NetFlow protocols v5, v9, and IPFIX. Accounting for IPv4, IPv6 traffic, and NAT translation events (NEL). Additional options is SNMP-index translation rules, aggregation rules, Ethernet type, MPLS, VLAN, and MAC addresses exporting.

ServerArk is a application for Linux gaming servers that samples and analyzes incoming UDP packets at the kernel level in real time to determine if any packets are part of a UDP flood attack. Flood attacks on gaming servers are typically designed to make the players on the server lag to the point where the game is not playable. It can even crash some game servers.

NetHogs is a small 'net top' tool. Instead of breaking the traffic down per protocol or per subnet, like most tools do, it groups bandwidth by process. NetHogs does not rely on a special kernel module to be loaded.

Libnids - NIDS E-component, based on Linux kernel. This library provides IP defragmentation, TCP reassembly and port scan detection.

FIRMAMENT runs, inside the Linux kernel, user supplied micro-programs over each processed message to emulate communication fault situations, using a script approach. The tool is appropriate to perform experiments over protocols and distributed systems.

Netconsole2Mail is simple python based daemon that receives netconsole messages from kernel on configured hosts and sends them to administrator in configured pooling interval. Only new messages are sent.

A lightweight PHP webapp designed for system administrators to track and monitor IP-based equipment. It's basically a dynamic inventory list, but has many additional features. It's suited well for anything from SOHO to whole data centers.

PHP clone of isdn4k-util 'imon'. phpimon monitors and controls i4l ISDN line interface status. When using mISDN, the common capidrv.ko kernel module will allow you to use phpimon even with mISDN devices.

Streamline is a pipelined I/O subsystem for both kernel and application processing on Linux, with 40+ filters for pattern matching, stream reassembly, compression, etc. It exports the pipes, sockets, and pcap interfaces and uses shared memory to reduce I

This project is to develop a versatile benchmark for High Performance Computing (HPC) network environments, currently the Linux-based Beowulf systems. The goal is to examine the TCP/UPD/MPI communications and their impact to system kernel.

ip-session gets info of network trafic, such as sip, dip, sport, dport, etc. from linux kernel; gets account info of each traffic, such as in/out bytes/pkgs, etc.; else, gives session management function, such as query/del, etc.

IP Traffic Volume: Logs (counts) in- & outgoing bytes through network device(s) using kernel iptables. Highly configurable as to which bytes are logged, e.g. to/from specific ports or ip-addresses. Data displayed in html via cgi or plain ascii to console

IP accounting tools package based on Berkeley Packet Filer mechanism. Continue from BPFT by V.Vorobyev, TRAFD by V.Belekhov & S.Svirid. Use the PCAP library to implement connection to bpf kernel pseudo-device.

SynAckFlood protect your linux box from portscan attacks, make a ficticious responce parallel to kernel, and portscanner show you that all ports are openned

Psniff is a packet sniffer and spoofer based on the PF_PACKET protocol family provided in kernel >=2.0 . Some of the protocols initially supported are IPV4,IPV6,TCP,UCP,BGP,ICMP,RIP, NTP.

IPTables::IPv4 is a Perl interface for managing the kernel-level Netfilter subsystem using Perl scripts.

Traffic discovery - product intended for traffic monitoring and accounting. Based on in-kernel-packet tracking. Output information is parsed in file in process information pseudo-filesystem (/proc).

stands for Active Integrity Software, provide quick alert of elf file modifications. Based on Gnu/Linux OS, with a daemon to analyse datas give by the kernel module, written in C.

Loggrep greps kernel logfiles on ipchains and iptables firewall log entries and features the ability to filter against given entries (date, IP, port, ..). It also features quasi-detection of protscanning, line count and html output.