Search Results for "events"

...This allows you to write SQL queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser plugins, hardware events or file hashes.Osquery queries your devices like a database. Osquery uses basic SQL commands to leverage a relational data-model to describe a device. Frequently, attackers will leave a malicious process running but delete the original binary on disk. This query returns any process whose original binary has been deleted, which could be an indicator of a suspicious process.

ipmiutil is an easy to use set of IPMI server management utilities. It can get/set sensor readings & thresholds, automate SEL management, do SOL console, etc. Supports Linux, Windows, BSD, Solaris, MacOSX. The only IPMI project tool that runs natively on Windows. See ipmiutil.sf.net for rpms, etc. (formerly called panicsel). It can run driverless in Linux for use on boot media or embedded environments.

Lilith is a logging and access event viewer for Logback, log4j & java.util.logging. It has features comparable to Chainsaw for log4j. This means that it can receive logging events from remote applications using Logback as their logging backend

...Remote Services can monitor multiple objects internally, when "pinged" by Amentet, if any of these objects has disappeared an exception is thrown back with the list of missing objects. Amentet will store events in a local Db which can be viewed using the Web interface and as events occur alerts will be raised which can be sent to SNMP Trap daemon and/or SMTP and/or SMS. The service uses Spring Security Framework for access control and can be configured to use any Authentication Authorization system supported by the Spring Security Framework.

SnmpB is an SNMP MIB browser written in QT. It supports SNMPv1, SNMPv2c & SNMPv3. SnmpB can browse/edit/load/add MIB files and can query SNMP agents. It also supports agent discovery, trap events, and graph plotting.

The purpose of the project is to develop a portable programming framework that facilitates distributed and multi-threaded programming for C++, Java, and Python. MADARA was originally developed as an agent-based middleware specifically for real-time, distributed artificial intelligence, but is now more general purpose for distributed timing, control, knowledge and reasoning, and quality-of-service. MADARA is composed of several tools and middleware, and the main entry point into the system...

...It collects most complete information about the network inventory, topology, map of IPv4 addresses quickly and with minimum hassle. Most important you will be able to collect, process and analyse Syslog events and SNMP alarms both in near-real-time and from the historical archives in a new way. We successfully used NG-NetMS for delivery of network assessment services for our customers worldwide for many years. And now we want to share this unique and fully functional tool with community. It is not capped in terms of performance or number of nodes. ...

PcapsE-OS X is a wrapper of tcpreplay directly integrated on Mac OS X Mavericks 10.9.3 for the execution of caps files that generate simulated malware traffic to test IDS Mac OS X based or redirecting simulated malware traffic on the interface of the IDS to other devices that perform correlation of events. Options:(1) Chat (2) Unix (3) Microsoft (4) Mac OS X (5) Network (6) DHCP (7) Firewalls (8) Routers (9) Proxy (10) Switches (11) HTTP (12) HTTPS (13) DNS (14) SW (15) Nessus (16) Tacacs+ (17) Vmware (18) Backdoors (19) Citrix (20) Mail (21) P2P (22) SQL (23) Web (24) XSS (25) Exploits (26) Xprobe (27) Nmap (28) Telnet (29) SSH (30) FTP (31) Vnc (32) Radius (33) Tor (34) Malware (35) DoS (36) Botnet (37) Openssl (38) Run cap (39) Malware News (40) Updates 2013-2014 pcaps (41) Updates 2015 pcaps.

The open source sensor network. Remotely monitor and control sensors over IP networks. Configure, control and monitor sensors from a web browser, receive e-mail and text message alerts, and trigger control commands based on sensor conditions.

...It's a SIP User-Agent, written in java, it works on windows, linux and mac. It can be used with SIP servers like opensips or asterisk IPBX. It supports G711 codec (PCMU and PCMA) and telephone-events (DTMF).

...NetDash processes each PCAP file and stores relevant information about each packet captured in a MySQL database. Loaded NetDash plugins display statistical and intrusion detection information on the dashboard and provide email and system notification of identified events.

Designing network protocols by hand is a costly and sometimes troublesome work. This C# library implements a generic network protocol that transports the events object creation, object destruction and the change of a property of one of those objects. It also has facilities to observe the objects for property changes. In sum, the properties of objects that are taken care of by the library are automatically kept in sync. The only requirement to the objects is that they notify the modification of their properties, similiar to what WPF requires from a (typical) view model.

Osmius: The Open Source Monitoring Tool is C++ and Java. Monitor "everything" connected to a network with incredible performance. Create and integrate Business Services, SLAs and ITIL processes such as availability management and capacity planning.

PortscanGeoinfo is a plugin for the powerful Prelude correlation engine. This plugin correlates alerts from Snort NIDS and OSSEC HIDS sensors regarding portscans. Geographical information (GeoIP) is included in the correlated alert.

Remote Services for OSGi provides a transparent way to access services on remote OSGi platforms. Additionally, it can interact with the EventAdmin service to deliver events between distributed frameworks.

Malu is a webbased network management system (Syslog, SNMP traps, graph SNMP values, TFTP server, reactions to events, ...). Design targets are scalability, flexability and simplicity.

TNV visualizes pcap data to graphically depict network packets, links, and ports for network traffic analysis to facilitate learning what constitutes 'normal' behavior, investigating security events, or network troubleshooting.

ROOK is multi-session based Intrusion Detection System (IDS). ROOK can recognize correlations between sessions (TCP, UDP and ICMP sessions) to detect network security events.

pleXus is a framework that allows you to control multiple programs (modules) by means of events, messages and simple scripting. We use it to build things like a remote controlled radio/mp3box or to control external hardware. (like robots or a house)

An ARP watch daemon for windows (portable to linux but it is already there...) which is able to be run as a service and logs to eventlog so one can collect the logs and react to events.

Parallel Events and Asynchronous tasKing Library. Originally combining multi-threading with an efficient I/O event model, it's now more a lightweight object-oriented framework for event-based applications.

Jubjub is a decision tree based framework for automating *NIX administrative processes and reacting to events. Working well with a network monitor such as Nagios, you can expose, document, and add notifications to scripts in one step.

Firebolt Network library (fnl) is a high level framework for network protocol implementations. You can implement your finite state machine oriented network protocol without messing with sockets. Define your states,events,transitions and you're ready.

The Big Brother Watcher is a Perl/Python server/client application to relay monitoring events directly to a user's desktop from either Big Brother or The Hobbit Monitor.

NINO is a network and system management solution to monitor your network, systems and applications: integrated, one tool for all. Features: SNMP, WMI, Service Response performance monitoring, graphs with zoom, topology view, events, reporting