Home / server / Questions / 44600
Accepted
Martin K.
Asked: 2009-07-24 05:34:51 +0800 CST

Open Source Linux network analyzer

  • 772

Open Source Linux network analyzer

Which are there? What features do they offer?

linux networking network-monitoring analysis open-source

11 Answers

  1. Best Answer

    What exactly do you need?

    • wireshark - network sniffer/analyzer
    • iftop - bandwidth usage
    • darkstat - traffic analyzer
    • nmap - network port scanner
    • nessus - vulnerability scanner
    • metasploit - penetration testing
    • 22

  2. Can't believe nobody mentioned tcpdump. Click on the link to see the list of features

    • 5

  3. ntop is a solution that has been around for a while, can be extended with plugins. Here is a short how-to.

    • 4

  4. Wireshark (formerly ethereal) is my favorite.

    • 3

  5. A few more:

    • lanmap2 - sits quietly on a network and builds a picture of what it sees.
    • kismet - wireless sniffer
    • nikto - web server scanner
    • nast - another network sniffer/analyzer
    • 3

  6. A missing tool from the list is ettercap. A text-based tool to analyse a subnet and perform active or passive scans of the subnet. It can also monitor packets and display streams.

    • 1

  7. If you need a network traffic analyzer you can use tshark (it's the console version of wireshark).

    • 1

  8. MRTG for nice pretty pictures and graphs (management p0rn) via SNMP monitoring. does everything i need, but if u dont list your requirements its quite hard to guess what you want.

    • 0

  9. p0f - passive OS fingerprinting (http://lcamtuf.coredump.cx/p0f.shtml)

    • 0

  10. for reconaissance / mostly real time analysis:

    • tshark - text-only version of wireshark when tcpdump is too cryptic.
    • httpry - simple nice passive http protocol sniffer.
    • ngrep - displays payload of selected traffic
    • 0