LibreNMS is an autodiscovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems including Cisco, Linux, FreeBSD, Juniper, Brocade, Foundry, HP and many more.
 
Its features include: 
<ul>
<li>Automatically discover your entire network using CDP, FDP, LLDP, OSPF, BGP, SNMP and ARP. </li>
<li>Highly flexible alerting system, notify via email, irc, slack and more. </li>
<li>A full API to manage, graph and retrieve data from your install. </li>
<li>Generate bandwidth bills for ports on your network based on usage or transfer. </li>
<li>Stay upto date automatically with bug fixes, new features and more.</li>
<li>Horizontal scaling to grow with your network.</li>
</ul>

LibreNMS is an autodiscovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems including Cisco, Linux, FreeBSD, Juniper, Brocade, Foundry, HP and many more.

LibreNMS - Network monitoring system

Moloch is an open source, large scale, full packet capturing, indexing, and database system. Moloch augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An intuitive and simple web interface is provided for PCAP browsing, searching, and exporting.
 
Moloch exposes APIs which allow for PCAP data and JSON formatted session data to be downloaded and consumed directly. Moloch stores and exports all packets in standard PCAP format allow you to also use your favorite PCAP ingesting tools, such as wireshark, during your analysis workflow.
 
 Moloch is built to be deployed across many systems and can scale to handle tens of gigabits/sec of traffic. PCAP retention is based on available sensor disk space. Meta data retention is based on the Elasticsearch cluster scale. Both can be increased at anytime and are under your complete control.

Moloch is an open source, large scale, full packet capturing, indexing, and database system. Moloch augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An intuitive and simple web interface is provided for PCAP browsing, searching, and exporting.

 Moloch - Large scale, full packet capturing, indexing, and database system

Sguil (pronounced sgweel) is built by network security analysts for network security analysts. Sguil's main component is an intuitive GUI that provides access to realtime events, session data, and raw packet captures. Sguil facilitates the practice of Network Security Monitoring and event driven analysis.

Sguil - The Analyst Console for Network Security Monitoring

NFStream is a Python package providing fast, flexible, and expressive data structures designed to make working with online or offline network data both easy and intuitive. It aims to be the fundamental high-level building block for doing practical, real world network data analysis in Python. Additionally, it has the broader goal of becoming a common network data processing framework for researchers providing data reproducibility across experiments. NFStream extracts +90 flow features and can convert it directly to a pandas Dataframe or a CSV file.


NFStream - A Flexible Network Data Analysis Framework

The Suricata engine is capable of real time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM) and offline pcap processing. Suricata inspects the network traffic using a powerful and extensive rules and signature language, and has powerful Lua scripting support for detection of complex threats.

Suricata IDS - Network threat detection engine

Naemon is the new monitoring suite that aims to be fast, stable and innovative while giving you a clear view of the state of your network and applications. The Naemon core is a network monitoring tool based on the Nagios 4 core, but with many bug fixes, new features, and performance enhancements. If you today use Nagios, you should switch to Naemon to get bugfixes, new features, and performance enhancements.

Naemon - Networks, Applications and Event Monitor, a Nagios fork

OpenWIPS-ng is an open source and modular Wireless IPS (Intrusion Prevention System). It is composed of three parts: Sensor(s): "Dumb" devices that capture wireless traffic and sends it to the server for analysis. Also responds to attacks. Server: Aggregates the data from all sensors, analyzes it and responds to attacks. It also logs and alerts in case of an attack. Interface: GUI manages the server and displays information about the threats on your wireless network(s).


OpenWIPS-ng - Wireless Intrusion Prevention System

Discover open source projects across all platforms

Projects

LibreNMS - Network monitoring system

Moloch - Large scale, full packet capturing, indexing, and database system

Sguil - The Analyst Console for Network Security Monitoring

NFStream - A Flexible Network Data Analysis Framework

Suricata IDS - Network threat detection engine

Naemon - Networks, Applications and Event Monitor, a Nagios fork

OpenWIPS-ng - Wireless Intrusion Prevention System

TechStack

Tagcloud

License

Suggested keywords:

Projects

LibreNMS - Network monitoring system

Moloch - Large scale, full packet capturing, indexing, and database system

Sguil - The Analyst Console for Network Security Monitoring

NFStream - A Flexible Network Data Analysis Framework

Suricata IDS - Network threat detection engine

Naemon - Networks, Applications and Event Monitor, a Nagios fork

OpenWIPS-ng - Wireless Intrusion Prevention System

TechStack

Tagcloud

License