Search Results for "network activity indicator"

Zeek has a long history in the open source and digital security worlds. Vern Paxson began developing the project in the 1990s under the name “Bro” as a means to understand what was happening on his university and national laboratory networks. Vern and the project’s leadership team renamed Bro to Zeek in late 2018 to celebrate its expansion and continued development. Zeek is not an active security device, like a firewall or intrusion prevention system. Rather, Zeek sits on a “sensor,” a...

...This allows you to write SQL queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser plugins, hardware events or file hashes.Osquery queries your devices like a database. Osquery uses basic SQL commands to leverage a relational data-model to describe a device. Frequently, attackers will leave a malicious process running but delete the original binary on disk. This query returns any process whose original binary has been deleted, which could be an indicator of a suspicious process.

It is a versatile DNS Proxy server with DNS firewall which filters DNS traffic between local computer and DNS servers with flexible rules, supports blocking by IP geography, caching, import/export rules into XML. With a click of a button acts as a DNS proxy (or DNS server), supports multiple client authentication methods, calculates statistics for DNS servers and proxy clients, supports load balancing between multiple upstream DNS servers.

Geo Firewall performs blocking of network traffic based on geography (geo IP), allows to add custom subnets, allows exceptions on ports for incoming traffic for specific geography, keeps visual and persistent logs, shows statistics, automatically updates geographical database.

Network Manager is a free and open source Windows tool that will aid you in monitoring and configuring your network adapters.

BGPHist is a tool that able to get MP-BGP updates, decode it, and write to the backend storage for logging and monitoring purposes. It support not only internet routes, but also these address families: 1. ipv4 multicast 2. ipv4 labeled unicast 3. vpnv4 unicast 4. ipv6 unicast 5. ipv6 labeled unicast 6. vpnv6 unicast 7. l2vpn vpls-vpws 8. ipv4 mvpn Backend storages supported - text output, MySQL database and Oracle database. For MySql backend there is also a simple PHP...

HAPviewer is a host application profile graphlet viewer. It visualizes network data through graphs on a per-host level such that running applications are apparent. Groups of flows are summarized to aggregates of per-role traffic.

Linux system daemon for capturing, analyzing network traffic and reacting to insecure activity.

Security Analyst Network Connection Profiler [sancp] is a network security tool designed to create connection logs and record network traffic for the purpose of auditing, historical analysis, and network activity discovery.

A pgbridge it's a simple program that is parsing squid log file and storing information about user activity into the database.

Accountability Pal monitors your network and keeps track of who is using the Internet and what they are viewing, downloading, uploading, etc. It emails a report of each user's activity to the person/people you specify. Great for parents and businesses.

Clobberd is a daemon that monitors user activity, and meters resources such as Time, and Network activity. clobberd will run on a single host, and monitor users by scanning the utmp file. Users are able to view their stats via a web page, and the remote