codesloop is a collection of tools and helpers for creating distributed applications.
6jack is a framework for testing, analyzing, and fuzzing network applications. 6jack runs a command, intercepts calls to common network-related system calls, and passes them through an external filter.
Addjob lets you distribute jobs over a network. You just run "addjob-server", and then submit jobs like "addjob gcc -c foo.c". You can still interact with your program via the command line, and exit-codes are preserved, so it integrates well with Makefiles.
aggregate is a tool for aggregating CIDR networks. Input is read from stdin and output is written to stdout. It undestands IPv4 networks represented as network/prefix, network/netmask and start_address - end_addres. It is able to read input in any one of these formats and output in the same or a different format.
Ahcpd is an implementation of the Ad-Hoc Configuration Protocol (AHCP), an IPv6 stateless configuration protocol for cases where standard auto-configuration and DHCPv6 don't work, such as mesh networks.
Amrita VPN is an easy-to-use open source VPN solution that runs on the GNU/Linux platform. The implementation is fully in userspace and requires no kernel patches or enhancements. It uses openssl library for strong encryption and authentication through SSLv3.
arp-scan sends ARP (Address Resolution Protocol) queries to the specified targets, and displays any responses that are received. It allows any part of the outgoing ARP packets to be changed, allowing the behavior of targets to non-standard ARP packets to be examined. The IP address and hardware address of received packets are displayed, together with the vendor details. These details are obtained from the IEEE OUI and IAB listings, plus a few manual entries. It includes arp-fingerprint, which allows a system to be fingerprinted based on how it responds to non-standard ARP packets.
asuc is a small Qt program written to display incoming UDP packages and send out keystrokes
Authentic is a Liberty-enabled identity provider aiming to address a broad range of needs, from simple to complex setups. Its Liberty compliance relies on Lasso, a free software implementation of the Liberty Alliance specifications. It is a quixote application and is commonly run inside the Apache Web server.
authz-tools is a set of tools to manipulate authz files (as used by mod_authz_svn).
The Barefoot server is a scalable user-space port bouncer that can be used to forward, or bounce, TCP connections and UDP packets destined for an address on the host the Barefoot server runs on, to any other host or address.
BindConfig is a tool to reduce the error prone work of maintaining BIND's zone files.
BitDew is a programmable environment for the management and distribution of data for grid, desktop grid, and cloud systems. It can easily be integrated into large scale computational systems such as XtremWeb, BOINC, Hadoop, Condor, Glite, Unicore, OpenStack, and Eucalyptus.
BongoSurfer is a least-cost router for Linux, like the Smartsurfer program for Windows. It allows you to connect to the Internet with a 56k modem or ISDN, and chooses the cheapest provider for you.
Brcontrol is a set of patches to allow some interaction between a IDS and a firewall (currently snort and linux netfilter) It can help in the creation of aggresive honeypots or other advanced firewall and ids configurations. In can also work as a bridge.
Campagnol is a distributed IP-based VPN software able to open new connections through NATs or firewalls without any configuration. It uses UDP for the transport layer and utilizes tunneling and encryption (with DTLS) and the UDP hole punching NAT traversal technique.
catnip is a tiny non-libpcap based network packet capturing tool. It is particularly suitable for embedded environments where a libpcap based tool, typically 100kiB for just libpcap and 500kiB for tcpdump, would be simply too large.
CCNx is a networking system which replaces named hosts with named content as the primary abstraction.
cdpr shows the switch and port that a machine is connected to, provided that the device supports CDP. It can also optionally decode the full CDP packet.
The Coraid Ethernet Console client, cec, can connect to any CEC server over raw ethernet.
The CentralNic Toolkit is CentralNic's system for instantaneous Registry-Registrar Communications. Registrars can use this system to register and modify domain names in real time, with no delays for human intervention or e-mail processing. The toolkit also provides advanced and efficient methods for searching for and querying domain names and whois records, and retrieving account information.
cflowd is a flow analysis tool currently used for analyzing Cisco's NetFlow enabled switching method. The current release includes the collections, storage, and basic analysis modules for cflowd and for arts++ libraries. This analysis package permits data collection and analysis by ISPs and network engineers in support of capacity planning, trends analysis, and characterization of workloads in a network service provider environment.
chaostables is a package with iptables/netfilter targets that will foil network scanners. Documentation on how it works and how to reimplement it in userspace are also provided.
classh is yet another wrapper around ssh for running commands on a number of hosts concurrently. It is similar to xCAT, pssh, Cluster ssh, and a gaggle of other utilities.
Cloud User Shell
Cloud User Shell (cush) is a multi-call executable bringing RESTful cloud control to the command line, combining many useful cloud computing utilities into a single executable.
CloudStack is a complete package for managing cloud computing and virtual infrastructure. It enables users to easily build, manage, and deploy private and public clouds.
Collink is a link extractor/collector based on Qt library. It saves list of links as plain text or better as a Downloader for X list providing different names for files to save.
Community-ID is an OpenID implementation which is OpenID 2.0 compliant. Users can keep track of their trusted sites and manage them.
comserv allows you to talk to a network terminal server such as a Xyplex MAXserver 1600. The handy thing about this program is that the client side of the connection does not need to know anything about how to talk to the terminal server. COMSERV handles the connection details.
Conserver is an application that allows multiple users to watch a serial console at the same time. It can log the data, allows users to take write-access of a console (one at a time), and has a variety of bells and whistles to accentuate that basic functionality. The idea is that conserver will log all your serial traffic so you can go back and review why something crashed, look at changes (if done on the console), or tie the console logs into a monitoring system (just watch the logfiles it creates).
Covert_qos uses the Quality of service fields in IPv4 and IPv6 to set up a unidirectional covert channel.
czxNetSwitch is a profile based network manager. It allows users to create different profiles for their network configuration and easily switch between them.
dbxbandmin collects traffic via ipchains/iptables/ipfwadm-rules and writes the data into an Interbase database.
Dedalo allows the automatic drawing of the topology of a Cisco network utilizing CDP and SNMP.
diald-top maintains a top-like listing of all packets and their time to live for use with diald. It uses named pipes for communication.
dispy is a Python framework for parallel execution of computations by distributing them across multiple processors in a single machine (SMP), or among many machines in a cluster or grid.
Domain Hunter is a simple application to monitor the state of a list of domain names. Changes in the status of a monitored domain can be sent to an email address or the domain information can be obtained on demand through a Web interface. Only the .com and .net top-level domains are currently supported.
DOmain Tracking Made Easy
DOmain Tracking Made Easy is a domain tracker. It's written in C and has a web interface in PHP and a MySQL DB backend. Its purpose is to make domain management easier.
dotXyGTK automatically downloads a selected class of pics from the net. dotXyGTK uses plug-ins to traverse various sites in search for pictures and Internet protocols.
DrKnock is a Dynamic Port Knocking solution based on sig2knock.
dumbado is a program that captures packets transmitted over the network, (AKA a packet sniffer) and stores statistics based on them for analysis or debugging
e-U Connect is a WPA Supplicant text mode user interface based on bash+dialog for connecting to the e-U network (www.e-u.pt) under Linux.
eldap is simple auxprop module for SASL that provides SASL authentication for services that do not allow the PLAIN mechanism (like subversion) and for people that don't think it a good idea to have plain text passwords in LDAP.
Enca is an Extremely Naive Charset Analyser. It detects character set and encoding of text files and can also convert them to other encodings. The charset detecing functionality is also available as a library.
Engine_pkcs11 is an implementation of an engine for OpenSSL. It can be loaded using code, config file, or command line and will pass any function call by openssl to a PKCS#11 module.
etcd is a distributed key value store that provides a reliable way to store data across a cluster of machines. It?s open-source and available on GitHub. etcd gracefully handles master elections during network partitions and will tolerate machine failure, including the master.
Feedbackd is an add-on to the Linux Virtual Server project (LVS) to provide dynamic feedback of server health.
flapjack is a command line utility to control the Belkin USB KVM switch with audio. It can flip just video, just audio, or both.
flowd is a small, fast, secure, and featureful NetFlow collector. It supports NetFlow versions 1, 5, 7, and 9 over IPv4 and IPv6 transports, IPv6 flows (using NetFlow 9), filtering and tagging of received flows using a packet filter-like language, Perl and Python APIs, flexible storage (with run-time selection of which NetFlow fields are stored), reception of multicast flow datagrams, and privilege separation for security. The flowd distribution also includes a set of supplemental tools including analysis and SQL database support.
freeDiameter is a framework in C for supporting the Diameter Base Protocol (RFC3588). Diameter is a protocol for authentication, authorization, and accounting; it is the successor of RADIUS.
furl is a small utility designed to display the HTTP headers returned by web-servers in response to client requests.
FWdoc is a vendor-independent standard of storing firewall ruleset configurations. We provide tools to extract the ruleset from proprietary formats into FWdoc format (in JSON), filter rules and objects, and export them into a number of other formats.
Gabriel is a simple utility to enable D-Bus clients to connect to a D-Bus
daemon running on a remote machine, through SSH.
GADMIN-DHCPD is an easy to use GTK+ frontend for ISC DHCPD. The program handles dynamic scopes, hosts, ranges, load-balancing/failovers, and settings.
GASNet (Global-Address Space Networking) is a language-independent low-level networking layer that provides network-independent, high-performance communication primitives tailored for implementing parallel global-address space SPMD languages such as UPC, Titanium, and Co-Array Fortran. The interface is primarily intended as a compilation target and for use by runtime library writers (as opposed to end users), and the primary goals are high performance, interface portability, and expressiveness.
gdrive is a simple command line Google Drive client written in Go.
GitUrl provides a Tiny URL-like service. Given a URL, it will produce a shorter URI which is easier to remember, paste, or write down. It is a simple CGI program that relies on a Web server, git, and a shell.
glNetViz is a tool for visualizing computer network topologies with WebGL. With the abilities of real time visualizing network traffics flowing around the local network and to/from the Internet, you can manage the various network more easily and efficiently.
Gnetworktester is an application that helps users in testing the quality of a network connection and in sending complaints on that to the network provider.
GoldenOrb is a cloud-based open source project for massive-scale graph analysis, built upon best-of-breed software from the Apache Hadoop project modeled after Google's Pregel architecture.
Google Web Office
Google Web Office - GWoffice - brings your google drive to your desktop. It offers you a nice interface to its editing abilities and also gives you basic syncing for offline use.
gressgraph produces a graph of your iptables ruleset using Graphviz. You can use the graph to look for vulnerabilities or redundancies, get a "feel" for a network, or showcase your firewall.
GRIA Command Line Client
The GRIA Command Line Client interface has several advantages over the standard graphical interface. It provides the ability to automate various common actions through easy to write and use batch or shell scripts. Actions can be performed automatically without the need for interaction with the user, and chained together to form pipelines. In addition, the command line client uses less resources than the graphical interface.
Gspoof is a GTK+ program written in C language which makes easier and accurate the building and the sending of TCP packet with a data-payload or not. It's possible to modify TCP/IP fields also Ethernet header working to Link Level.
Gtk Netware Client
Gtk Netware Client is a graphical client for Novell Netware. It's mainly a frontend to ncpfs tools. This client provides graphical login bringing up netware file systems exported for your server , along with the ability to bring up print services in the future.
gURLChecker is a graphical web sites checker for GNU/Linux and other POSIX OS. It can work on a whole site, a single local page or a browser bookmarks file.
gWakeOnLAN is a GTK+ utility to awaken machines using Wake on LAN.
gXiso is a GTK2 program to extract and/or upload xbox iso images to xbox.
hamachi-gui is a graphical user interface (GUI) for the zero configuration VPN client Hamachi. The official client for Linux has only a command line interface. hamachi-gui provides a user friendly GUI with comparable features and more.
HEGONS is a HEterogeneous Grooming Optical Network Simulator that supports mixed routing and wavelength assignment algorithms and optional wavelength conversions capability on each node. The goal of Hegons is the evaluation of different dynamic routing and wavelength assignment (RWA) algorithms in WDM optical networks in terms of several measures such as: call blocking probability, fairness (variance in blocking probability), call setup time, etc.
Howl is a cross-platform implementation of the Zeroconf networking standard. Zeroconf brings a new ease of use to IP networking.
HTTP Time Protocol
HTTP Time Protocol is a time synchronization tool that uses Web server responses (HTTP headers) instead of the NTP protocol. It works through proxy servers and with HTTPS sites. It is especially useful for strongly firewalled machines.
Hypersocket is a streamlined VPN solution built for all types of remote access scenarios. Powerful yet simple to use, Hypersocket uses a single installed client to provide access to any number of network resources.
IANA /etc Files
The iana-etc package provides the Unix/Linux /etc/services and /etc/protocols files.
ifchk is a network interface promiscuous mode detection tool written with both security and system administrative applications in mind. It report on the operational state (PROMISC, normal, down, etc) of each interface attached to the system, shutdowns all interfaces running in promiscuous mode, if told to do so, provides reports and logs.
imsptool is a command line tool to communicate with an IMSP server. In particular, it allows you to create, delete, import, and export address books. imsptool imports and exports using the LDIF format. Netscape Messenger and LDAP directory servers such as OpenLDAP use this file format directly.
IMUNES (Integrated Multiprotocol Network Emulator / Simulator) is a simple Tcl/Tk based management console, allowing for specification and management of virtual network topologies. The emulation execution engine itself operates within the operating system kernel.
inetutils is a collection of common networking utilities and servers including ftp, ftpd, rcp, rexec, rlogin, rlogind, rsh, rshd, syslog, syslogd, talk, talkd, telnet, telnetd, tftp, tftpd, and uucpd.
iodine is a piece of software that lets you tunnel IPv4 data through a DNS server. This can be useful in situations where Internet access is firewalled, but DNS queries are allowed. It needs a TUN/TAP device to operate.
ip2clue provides access to multiple databases (Maxmind, Software 77, Webhosting.info and ip2location) to retrieve country information associated with IP addresses.
IPQ BDB is a netfilter userspace daemon that can block or mark IP packets according to iptables rules that issue the corresponding -j NFQUEUE, as well as a Berkeley database of bad IPv4 addresses.
IRRToolSet is a set of policy analysis tools, written in C++. It's designed to run under UNIX, using Tcl/Tk for graphics. There are tools for generating router configuration files, displaying and checking routes, generating aggregations of networks, etc. This project was formerly known as the Routing Arbiter ToolSet (RAToolset), and was maintained by ISI.
Khttrack is a easy-to-use offline browser utility with Kde Wizard Interface. It allows you to download a World Wide Web site from the Internet to a local directory, building recursively all directories, getting HTML, images, and other files from the server to your computer.
kio_gopher is a gopher kioslave. Kioslave is a KDE technology that allows KDE programs to access a given protocol. Gopher is an Internet protocol similar to HTTP with only text and links.
KLinkStatus is a KDE link checker. It is based on LinkStatus but offers new features like support for several protocols and others. It's also possible to use KLinkStatus embedded as a KPart.
LAM/MPI is an MPI programming environment and development system for heterogeneous computers on a network. With LAM, a dedicated cluster or an existing network computing infrastructure can act as one parallel computer solving one problem.
Lan Core is a full solution for thin client technology. The server and client can be configured quickly and easily. The clients work on Windows and Linux.
LibreS3 is a robust open source implementation of the Amazon S3 service, supporting a subset of the S3 REST API.
lifstat is a linux utility that reads /proc/net/dev and reports input and output statistics for available network interfaces over a repeating time inteval similar to the BSD 'netstat -i' command.
Lightweight Neural Network ++
Lightweight Neural Network ++ is a lightweight backpropagation neural network in C++. The project provides a class implementing a neural network, and a class for easily train it.
Linux Bluetooth Remote Control
Linux Bluetooth Remote Control (LBRC) is a remote control program that allows a Linux computer to be controlled by a J2ME device via Bluetooth. It is divided into a server part that runs on the computer and reacts to input events and a client part that runs on the J2ME device. The J2ME client sends the device's keycodes, which are translated to keystrokes, mouse movements, mouse clicks, or other input events on the controlled computer.
local-remote-controll-gui is a graphical application for running commands on remote servers. It also implements true file sharing like sshfs.
LocDemo demonstrates the functionality of libwlocate.
Los Alamos Message Passing Interface
Los Alamos Message Passing Interface is an implementation of the Message Passing Interface (MPI) motivated by a growing need for fault tolerance at the software level in large high-performance computing (HPC) systems.
lwIP is a small independent implementation of the TCP/IP protocol suite.
The mii-tool command provides an tool for checking and setting ethernet cabling parameters. It is normally included in Bernd Eckenfels' net-tools package, but this is an single distribution which only contains mii-tool. This package also comes with cleaned makefile and allows build-time relocation and cross/sysroot-compiling.
MIPL Mobile IPv6 for Linux
MIPL Mobile IPv6 for Linux is an implementation of Mobility support in IPv6. Mobility support allows a mobile device to be tracked as it migrates between networks or even ISPs, allowing packets to be forwarded to where the device is currently located.
MirrorBrain is a framework to run a content delivery network using mirror servers. It solves a challenge that many popular open source projects face: a flood of download requests, often magnitudes more than a single site could practically handle.
moltiblock is a user-space plugin to netfilter for blocking lots of nets. No need to recompile kernel or patch other sources.
The MPI-IO Test is built on top of MPI's I/O calls and is used to gather timing information for reading from and writing to file(s) using a variety of I/O profiles. A data aggregation capability is available and the user can pass down MPI-IO, ROMIO, and file system specific hints. The MPI-IO Test can be used for performance benchmarking and, in some cases, to diagnose problems with file systems or I/O networks.
MPICH is a robust and flexible implementation of the MPI (Message Passing Interface). MPI is often used with parallel or distributed computing projects. MPICH is a multi-platform, configurable system (development, execution, libraries, etc) for MPI. It can achieve parallelism using networked machines or using mulitasking on a single machine.
MuLaNEO is a software for Multi-Layer Network Engineering and Optimization (MuLaNEO) and was created at the Chair of Communication Networks at the University of Würzburg within the project 100GET-E3.
multisend is a program that uses multicast to efficiently transfer files to multiple hosts. It has the usual cp options such as recursion, and checksums files with SHA1.
My Network Catalog
My Network Catalog is an indexing engine that allows windows shares (or Samba) over a local network could be bind together. So via a search center all the files over the network could be easily accessed.
MyHTB is a set of HTB (Hierarchical Token Bucket) tools for traffic management under Linux with a MySQL database backend. It contains a Web frontend to add/modify clients, IP and bandwidth, and computes a new HTB tree every 1-5 minutes.
mySSUS (my Simple Short URL Service) allows users to manage a hierarchical set of short URLs and their long translations.
n2n (network-to-network) is a layer-two peer-to-peer virtual private network (VPN) that allows users to exploit features typical of P2P applications at network instead of application level. This means that users can gain native IP visibility (e.g. two PCs belonging to the same n2n network can ping each other) and be reachable with the same network IP address regardless of the network where they currently belong.
NagAmp interfaces between Nagios and a Cleware "ampel" (traffic light) device.
Nagcon is a console application which replaces the Nagios Web interface. It allows you to quickly view which services have become troubled.
NBTScan is for scanning IP networks for NetBIOS name information. It sends NetBIOS status query to each address in supplied range and lists received information in human readable form.
NBTscan-Ipanto is a command-line tool that scans for NETBIOS devices on a local or remote TCP/IP network. It gives very useful reports, including the username connected on each detected device.
ndisc6 consists of three command line tools (ndisc6, rdisc6, and tcptraceroute6) that perform ICMPv6 Neighbor Discovery, ICMPv6 Router Discovery, and TCP/IPv6 traceroute respectively. It is primarily meant for IPv6 networking diagnostics or to detect rogue IPv6 nodes or routers on an Ethernet segment.
The Network Traffic based Application Identification (netAI) has been developed for identifying the end host applications that are responsible for traffic flows in the network. Unlike previous solutions that identify the application based on port numbers or packet payload (either through protocol decoding or signatures) netAI computes various payload independent features (e.g. packet length and packet inter-arrival time statistics) for a traffic flow and uses machine learning (ML) techniques.
NetChat is a network version of the "chat" utility that comes with PPP. It is a general purpose network "conversations" tool, designed for network testing. It can also be used for (very) quick setup of a server for a new protocol.
NetDoT is a tool for network documentation. Relevant features include device discovery (SNMP), layer2 topology discovery and graphing, IP address space management (IPAM) for IPv4 and IPv6 with DNS/DHCP configuration generation, cable plant, and more.
netem is a network emulator tool.
netmapr is a basic SDL-based network diagram program that aims to be quick and easy to use without a huge list of library requirements. It supports NetViz-style "drilldown" into nested diagrams.
Netomata Config Generator
Netomata Config Generator (NCG) creates complete, ready-to-install configuration files for network devices and services from a common lightweight model of a network.
netstat-nat displays NAT connections created by the iptables conntrack module.
Network Daemon Exploder
Network Daemon Exploder is a perl program which will make n connections to randomly selected servers out of a pool. It will then write things to that connection choosing a random item out of an array.
Netzob is an open source tool which supports the expert in its operations of reverse engineering, evaluation and simulation of communication protocols.
Network Interface Statistics Collection Agent is a network stats analyzer.
Nitpicker is an Ethernet accounting tool, which listens on an interface and accumulates all packets into flows.
Nixory is an Anti Spyware program open source for Mozilla Firefox, planned for remove malicious data miner. It is a software written completely in Python and PyGTK, and it is supported by all most used platforms. Read more
Nnetstat is a Perl/Gtk-based program that provides similar functionality to netstat.
nrun will run a single command or script on a multiple of target servers synchronously.
ns-3 is a discrete-event network simulator for Internet systems, targeted primarily for research and educational use.
nss-mdns is a plugin for the GNU Name Service Switch (NSS) functionality of the GNU C Library (glibc) providing host name resolution via Multicast DNS.
nss-pam-ldapd is a Name Service Switch (NSS) module and Pluggable Authentication Module (PAM) that allows your LDAP server to provide user account, group, host name, alias, netgroup, and basically any other information that you would normally get from /etc flat files or NIS.
Nubell Client is a Novell Netware Client for Unix written in TCL/TK. It has been tested with Linux on Intel and Sparc machines with Netware 4.10.
OmniSync is a driver for NTPd for people who are firewall-challenged. It enables systems to synchronize time when port 123 (UDP) is blocked. It allows you to sync against the daytime service (port 13 TCP/UDP), time (port 37 TCP/UDP), SNTS, and HTTP and HTTPS (both also via proxy server). It doesn't directly set the clock but uses NTPd for this, as this enables you to have multiple time sources as well as bad-chimer detection, etc.
oneye is an open source cloud software for your own server. It can be accessed from just everywhere with the browser of your choice and it does not provide your data only, but gives you the possibility to work with them in a desktop-like environment ? all inside your browser.
OpenAMQ is a fast, stable, free implementation of the AMQP messaging protocol. It gives applications high-performance messaging (delivery of opaque data) across loosely connected networks. It is capable of handling 10k-100k messages per second depending on the hardware, with a latency around 350 microseconds. It is multithreaded and supports C/C++ on multiple platforms.
Openfiler is a powerful, intuitive browser-based network storage management utility. Openfiler, combined with the underlying Linux-based Operating System, delivers file-based Network Attached Storage and block-based Storage Area Networking in a single framework.
OpenMOLE (Open MOdeL Experiment) makes it simple to execute your programs on distributed computing environments. If you want to execute the same program for many different inputs (parameters or datasets), OpenMOLE is the tool that you need.
OpenNHRP implements the NBMA Next Hop Resolution Protocol (as defined in RFC 2332). It makes it possible to create a dynamic multipoint VPN Linux router using NHRP, GRE, and IPsec. It aims to be Cisco DMVPN compatible.
OpenRRCP is a cross-platform tool based on RRCP (Realtek Remote Configuration Protocol). It is able to configure and fetch status from L2 Ethernet switches based on some of Realtek's chips. Linux and RTL8316B/RTL8326/RTL8326S are supported at the moment.
OpRoute establishes a measurement system which takes into account all of the important factors regarding network performance.
Ops Control Panel
Ops Control Panel provides quick, simple access to information about your network. It requires MRTG and Perl or PHP.
OSPFviz is a visualization software that displays OSPF router information on dynamically routed networks and draws a network map as image. This can be very helpful when searching for asymmetrical routes, when designing load balancing or just for documentational purpose. Works on SNMP capable devices that implement the OSPF-MIB.
Ostinato is a network packet and traffic generator and analyzer with a friendly GUI. It aims to be "Wireshark in Reverse" and thus become complementary to Wireshark.
ovpn-py is a plugin embedding Python into OpenVPN using the V1 API. It is a bridge allowing developers to write OpenVPN plugins in Python.
P2PVPN is simple software that provides you with a Virtual Private Network without the need to set up a central server.
Package SNMP Subagent
The Package SNMP Subagent provides indexed package information via SNMP output.
The Packet Debugger (pdb) is a program which allows people to work with packet streams as if they were working with a source code debugger. Users can list, inspect, modify, and retransmit any packet from captured files as well as work with live packet capture.
packETH is a Linux GUI packet generator tool for ethernet. It allows you to create and send any possible packet or sequence of packets on the ethernet.
PageKite is a system for running web-servers on machines without a direct connection to the Internet, such as mobile devices or computers behind restrictive firewalls.
The Paglo Crawler collects all IT information from a network and makes it available in a search index. It collects information using SNMP, SSH, and various other protocols. It can be extended via plugins written in Ruby.
PAM/NSS-DCE implements a common, hardware and operating system independent platform, giving the administrator a (nearly) homogeneous system view.
pasvnag_lite is a (passive) Nagios checker.
Pathfinder PKI Daemon
Pathfinder provides a mechanism for any program to perform RFC3280-compliant path validation of X509 certificates, even when some of the intermediate certificates are not present on the local machine.
Pbnj gives you a concatted diff of the services running on the machine overtime by parsing an nmap and amap scan into .csv (comma delimated format) file.
pcapfix tries to repair your broken pcap files by fixing the global header and recovering the packets by searching und guessing the packet headers.
pexconfig allows you to use a PXE-enabled network card as the first boot device for a system.
POESIA seeks to develop, test, evaluate and promote a fully open-source, and extensible, state of the art, filtering and catching software solution.
Pol-IP is a complete traffic control system for a Linux NAT box with multiplataform clients. It has a user-friendly wizard to config the system in which you can add, delete or chage, clients or groups bandwith, in a hierarchical structure. The clients get clean statistics about their actual speed and assigned bandwith.
portmap is a part of the ONCRPC collection of software for implementing remote procedure calls between computer programs. It is use widely by NFS and NIS, and assorted other systems.
ppcrack decrunches all types of Amiga PowerPacker files, including encrypted files.
Packet REPLAYer is a general, user-space tool for network packet replaying and packet modification on Linux systems.
Preppi is a simple graphical EPP client for Unix and Linux systems. It is written in Perl and makes use of the GTK+ and GNOME bindings for Perl, and our own EPP libraries.
Propagast grabs UDP broadcast packets on the fly, and redirects them to all the unicast sockets that should have received these packets.
Protoscope is a suite of utilities that aids developers by revealing underlying protocols. The initial development is with the HTTP protocol, and the HTTPscope server is a nice tool for Web developers who want to "look under the hood" as they develop.
The PXE manager is a system to control PXE configuration on a machine-by-machine basis.
Python Multimodal Hub
The Python Multimodal Hub is an implementation of the Multimodal Middleware Protocol. It is used to interconnect components in a network and to route messages between them. One of the goals of the project is to fully implement the protocol and to enable user-configured profiles. New components can be easily developed in Python using the included library. It can also be used to link devices in a home network and to interact with mobile phones.
python-symmetric-jsonrpc is a JSON-RPC implementation for Python that is symmetric (both ends can call each other), asynchronous (calls can interleave with responses), thread-safe, and transport agnostic (can be run on top of e.g. an SSL connection).
Qt SOAP Manager
Qt SOAP Manager is a GUI tool for sending SOAP messages. It can be used for the development, debugging or exploration of Web Services. It is written in C++ and should run on every platform supported by Qt.
QTTY is a console client software, running on Linux and Windows, that allows Bluetooth RFCOMM connections to QConsole/WmConsole servers running on Symbian and Windows Mobile devices.
Quagga is a routing software suite, providing implementations of OSPFv2, OSPFv3, RIPv1 and v2, RIPng, IS-IS, and BGP4+ for Unix platforms, particularly FreeBSD, Linux, and NetBSD.
RadialNet is a network visualization tool. It consists in a graphical visualization of the networks mapped with Nmap, with some efforts to make it easy to find security problems.
rappd (Remote Applications Daemon) provides the server side of rapp, which manages application back-ends providing interfaces to rapp clients. When connected, the server sends out XML descriptions of graphical interfaces (widget hierarchies) which the client renders. Actions on interfaces are communicated back to the server which then updates the interface.
ratemask makes it easier to create ICMP type masks, as used in the icmp_ratemask sysctl, viewable through the /proc filesystem.
(commercial) RBridge is a remote Ethernet bridge solution for Linux. It connects two trusted Ethernet segments remotely over a TCP tunnel using either IPv4 or IPv6 transport.
RCP100 is a modular router control plane for Linux platforms. It can be used as a standalone router, or it can be deployed as an embedded router in a virtualized environment.
Remobo creates an Instant Private Network (IPN) between users. It lets you login easily and add users to your buddy list, and create a secure network for you.
remoteEncFs is a helper for using a remote file system using EncFS on a local computer. It covers several use cases controlled by options.
remotehost_applet helps to administrate your remote hosts. You specify the host's address, your login name, and a network protocol, and with additional information about the remote host's operation system a panel icon is created and linked with useful commands (in German).
rICMP is a tool (a kernel patch and some user space tools) that allows you to remote reboot hanged machines.
Rocks protect sockets-based applications from network failures,
particularly failures common to mobile computing.
RSIP is designed as an alternative to NAT but with the additional requirement to preserve end-to-end packet integrity.
Ruby Iptables Network Displayer
Ruined stands for "Ruby Iptables Network Displayer". It outputs SVG graphs from an iptables configuration.
RunPON establishes a network connection by calling the pon/poff scripts. It periodically checks that a given interface is still active.
Service Guardian aims to protect servers against various things such as resource exhaustion and connection floods.
The SlimPeer client is a fully PeerCast compatible but small, fast, and easy to use peer that can be used for replaying peercast:// streams without the need to perform complex and difficult configurations. After installation, all PeerCast P2P streams can be replayed immediately.
SourceSafe for Unix
SSU (SourceSafe for Unix) provides command-line access to local and remote Source Safe/VSS repositories through TCP.
Speed is a simple program to add a transfer meter to any console or terminal based copy program. It allows you to easily report Kilobytes or Megabytes per second when using programs that do not report file transfer speeds (such as 'cp' or 'ftp').
Spines is a generic messaging infrastructure that provides transparent unicast and multicast communication over dynamic, multi-hop networking environments without the need for expensive router programming environments or low level router coding. It provides automatic reconfiguration and network flexibility required both for research and production deployments.
SquidTL allows proxy administrators to configure how much time users can spend on a specific Web site.
sshuttle is a transparent proxy server that works as a poor man's VPN. Forwards over ssh.
sslh lets one accept both HTTPS and SSH connections on the same port. It makes it possible to connect to an SSH server on port 443 (e.g. from inside a corporate firewall) while still serving HTTPS on that port.
StoneVPN is a system that makes it easy to create certificates and configuration files for use with an OpenVPN server for both Windows and Linux users.
Storage Resource Broker
The SDSC Storage Resource Broker (SRB) is client-server middleware that provides a uniform interface for connecting to heterogeneous data resources over a network and accessing replicated data sets. SRB, in conjunction with the Metadata Catalog (MCAT), provides a way to access data sets and resources based on their attributes and/or logical names rather than their names or physical locations.
STPsim is an application that simulates and visualizes switches using the Spanning Tree Protocol. It features a GUI to build and control a custom network topology.
surl is a URL shortening command line application that supports various sites. It supports stdin or filename input.
TCP Knocking provides a port knocking implementation that attempts to solve problems of opening firewalls to provide remote access by incorporating the knock into unused fields in the TCP handshake sequence packets, rather than using UDP packets with secret ports.
TCP/IP pipes provides a simple set of utilites with examples for making finger services, TCP connection testers, echo servers, redirection services, TCP wrappers, etc.
tcpdump2ascii is a small perl utility which parses the hex output from 'tcpdump -x' and displays this as ASCII.
tcpflow captures data transmitted as part of TCP connections (flows), and stores it in a way that is convenient for protocol analysis or debugging.
tcpify is a couple of wrapper programs that allow simple commands to communicate using TCP sockets. It works by replacing the standard input and output channels by a connected socket.
Tcpindex captures packets from a LAN and indexes all of the strings from those packets in an inverted index so they can be efficiently searched using keywords. Think of it like a simple search engine for packets across the network.
tcpmd5 signs packets with an MD5 hash as defined in RFC2385, which is in practice used for BGP session protection. It does not require any kernel or routing daemon (e.g. quagga) TCP-MD5 support.
tcpsound plays sounds in response to network traffic permitting a user to literally listen to a network. Specifically tcpsound forks a pseudo terminal in which to run tcpdump(8), parses that output, and plays a wide variety of user configuable sounds.
tgn is a traffic generator that sends out manufactured packets to a specific address, using rules or information that the user sets. tgn is in Debian, but not Arch/AUR. It has the same packet crafting and injection capabilities provided by the network expect framework
ThinTUX Terminal Server Project
ThinTUX Terminal Server Project is a solution that enables any business to deploy centralized applications to thin clients.
Traffic Control is a revision of the Linux network traffic control infrastructure that aims to make the configuration language less cryptic, and provide better interfaces for software and hardware accelerators.
TrueCL aims to provide advanced high availability clustering across larger clusters. It has currently been tested with up to 8 nodes.
tspipe solves the problem of demonizing processes that log to stdout. It takes every line of input, timestamps it, and saves it to a logfile that is easily rotated.
tunctl is a small tool for controlling Linux TUN/TAP devices. TUN/TAP devices are virtual network devices where software emulates the wire.
ucspi-tcp contains tcpserver and tcpclient, which are easy-to-use command-line tools for building TCP client-server applications.
Uniclient is an universal TCP client. It connects to a TCP server and executes an Aime program against the server.
uperf is a network performance tool that supports modelling and replay of various networking patterns. It represents the next generation benchmarking tools (like filebench) where instead of running a fixed benchmark or workload, a description (or model) of the workload is provided and the tool generates the load according to the model.
utcpdump is a slimmed-down version of LBL tcpdump 3.4 developed for Trinux but suitable for inclusion in other floppy or low-footprint Linux distributions.
Vblade is a software-based AoE target, a virtual EtherDrive Blade. It exports local block storage to hosts on an ethernet local area network. Hosts with an ATA over Ethernet (AoE) initiator, like the aoe driver for Linux, can then access the storage over the ethernet.
Venezia is a client for Charle P. Wright's c-mserver. It was developed using gtk under Linux.
VLANd is a Python program intended to make it easy to manage port-based VLAN setups across multiple switches in a network. It is designed to be vendor-agnostic, with a clean pluggable driver API to allow for a wide range of different switches to be controlled together.
vpntool is a cross-platform GUI applet for managing VPNC connections, connecting to Cisco virtual private networks.
WANsim allows you to simulate (more accurately, emulate) a WAN connection. In particular, it allows a user to change the emulated WAN speed, latency, variation, packet loss, packet duplication, and packet corruption aspects.
Webresolve is used in conjunction with a log analyzer to get hostnames rather than IP addresses in the statistics. It speeds up resolution by running several processes in parallel.
Wheretero determines the country where the local computer is. This allows automatic keyboard layout configuration for live-CDs.
wiki-stream is an automated explorer of the vast river that is Wikipedia.
Wikicurses is a simple curses interface for MediaWiki sites such as Wikipedia.
Window Shifter is a tool that allows you to move applications between networked computers
wol implements Wake On LAN functionality in a small program. It wakes up hardware that is Magic Packet compliant.
Wzfusker is a small clone of fusker, which was a program that could be used to download parts of Web sites. It provides several tools to make selective mirroring easier, including selecting only URLs or images from the page and regex-based matching of links.
Xealous Nets is a set of programs that let you perform network calculations. They are useful and handy for the typical network administrator as they allow classful calculations and classless (CIDR) calculations, combining the functionality given by several online similar calculators in one single and portable package with a simple and effective command line interface.
Xidel is a command line tool to download Web pages and extract data from them. It can download files over HTTP/S connections, follow redirections, links, or extracted values, and process local files.
XtekRouter Free offers a linux router for your home or small office network.
Yet Another Flowmeter
Yet Another Flowmeter (YAF) is a tool for network flow capture, primarily designed to operate efficiently on white box hardware and generate IPFIX flow records. It is designed to operate primarily on Unix-based systems (including Mac OS X), and is supported by the Network Situational Awareness team at CERT.
ZFN (the Zero-Configuration File Network) aims to be a standards-compliant distributed network system targeted at home users and small businesses. It requires little to no initial set-up once installed, and can share files between computers of any operating system.
ZipCracker is a program to help users recover files from password protected zip archives. It has a easy to use Gnome User interface.