Open Source Windows Network Monitoring Software

NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows that can detect the OS, hostname and open ports of network hosts through packet sniffing or by parsing a PCAP file. NetworkMiner can also extract transmitted files from network traffic. New versions of NetworkMiner are released exclusively on www.netresec.com since version 2.0 of NetworkMiner. This page on SourceForge is only kept to provide hosting of older versions of the software. To get the latest version of NetworkMiner, please visit: http://www.netresec.com/?page=NetworkMiner

dvbsnoop - DVB analyzer / MPEG analyzer program to monitor, analyze, debug, dump or view dvb/mpeg/dsm-cc/mhp stream information (TS, PES, SECTION) (e.g. digital television) send via satellite, cable or terrestrial.

This software is a very simple network analyzer. When you click the start button, it will send a configurable stream of UDP packets to a host. (The receiving host is then required to echo all the packets back to the sender, which can be easily done via iptables rule under linux). Once the eched packets arrives back to the sender, the analyzer will calculate all the related statistics like, packet loss, jitter throughput etc... NOTE: in order to receive the echo packets you must configure the receiving host to echo the incoming packets. In the next release i will provide another java application that just echo on an UDP port.

ModbusBB is a professional Modbus Master/Client application for Windows, designed for engineers who need to test, debug, and monitor Modbus slave devices quickly and reliably. Supports both Modbus TCP/IP and Modbus RTU serial protocols with full configuration options for any industrial device. All standard function codes FC01 through FC16 are supported including Read Coils, Read Discrete Inputs, Read Holding Registers, Read Input Registers, Write Single Coil, Write Single Register, and Write Multiple Registers. Key features: - Auto-polling with configurable intervals from 100ms to 10 seconds - Complete communication log with request/response details and CSV export - Device scanner to discover slave IDs and valid register ranges - Watchdog alerts when values change or exceed thresholds - Connection profiles to save and switch between device configurations - Data logging to CSV with timestamps for trend analysis in Excel - Modern GUI and command-line (CLI) interface for auto

Simple Event Correlator (SEC) is a lightweight event correlator for network management, log file monitoring, security management, fraud detection, and other tasks which involve event correlation.

DIMTree is Tree View Browser for DIM system. The DIM is CERN designed Distributed Information Manager system, see http://dim.web.cern.ch/. DIM uses to create distributed DAQ and experiment control systems. DIMTree is browser for DIM which provides Tree View to browse DIM Servers, his published Services and it's data content. It's useful test/monitor/debug tool for DIM users.

Active Networking provides a framework in which executable code within data packets can execute upon intermediate network nodes. The goal of this research is to develop active networks that are capable of predicting their own behavior and to use this ca

The Citizen Privacy Service is an asynchronous component using artificial intelligence capabilities including DL decidability and first order logic provenance that provide policy decision and policy enforcement points based on the US Privacy Act of 1974.

Cnc's IP Data Volume Report: Logs IP to IP contact, number of packets, bytes, time of contact, Ethernet too! View via local web interface. Very simple for those who want to view who your computer is contacting the most!

Dtrag is a distributed IP traffic generator, where traffic nodes are controlled through a central application via CORBA and may generate IP/UDP traffic patterns in a network. The nodes run on Linux and Windows.

This is part of the GAMES Project, which consists of a set of innovative methodologies and Open Source ICT tools for designing and managing energy efficiency in IT Service Centres. The ESMI is the monitoring and sensing infrastructure which allows the fine-grained measurement and provides both an event-based and a real-time stream of data conveying information about the energy consumption in the key points of the overall system. It is completed by a set of Nagios plugin and an assessment tool which implements some green Performance Indicators and integrates data mining with the self adaptive controllers of the entire framework.

Informationprovider (Sensor) for Geolocation and Maintenance data. The provider is able to publish geolocation data as well as maintenance messages and site descriptions to a Globus MDS4 grid information system.

Create ports : TCP/UDP/Terminal/File/RS232(txrx)/DB/System/Bluetooth/JNA/ETH(jpcap)/Sound. Simply configure with GUI/SFC XML file/CLI. Display, modify, replay, store (tcpdump), decode flow of bytes or objects. Implement : loop/echo/paddings/... and delai/DB2XML/Stacks/Matrix/... management. Stream conversations with a dynamic packet analyse.

Java and ColdFusion libraries to lookup country code and language from IP address. It uses a local copy of the WHOIS database to perform fast, accurate lookups of country codes. Useful for log analysis, internationalization, geolocation, etc..

Sniffer Server - decodes TCP streams and captures packets in general The captured content may be saved to files or sent to a client over TCP/IP connection (self-defined protocol)

- language perl / library Graph, XML::LibXML - OS platforms, all platform that support perl and lsof tool - This software aims to realize an HIDS, based on programs behaviour modelling.

Network grep, on steroids

RRDPlanner project consists in a set of tools to help in capacity planning from data collected in Round Robin Database files (from PNP4Nagios, Cacti or other polling softwares).

The purpose of this project is to build a client-server application that will send summaries from Seti@Home clients distributed all across a network to a central host, allowing that way to a monitoring program to show results and statistics for multiple c

A proof-of-concept application of the Statistical Protocol IDentification (SPID) algorithm. SPID can detect the application layer protocol (layer 7) by analysing flow (packet sizes etc.) and payload statistics (byte values etc.) from pcap files.

Welcome to the Volunteer-Based System for Research on the Internet! This system is designed to provide detail data about applications used in the Internet. This information can be used for: - obtaining the knowledge which applications are most frequently used in the network - providing the users some basic statistics about their Internet connection usage (for example for which kinds of applications their connection is used the most) - creating scientific profiles of traffic generated by different applications or different groups of applications - creating a traffic generator, to imitate traffic generated by particular applications, or to imitate the real traffic in the network - implementing smart assessment of QoS in the network at the users' level and in the core of the network - obtaining precise data needed to train Machine Learning Algorithms - many more cases :-)

escapeNET is used to provide an user or customer with all the necessary information from the internet he can not get because company restrictions or proxy servers. It can be used to connect to different services on the internet from any computer.

jLlama is a desktop application to monitor servers over SSH. Any figure retrieved from the command line can be polled and graphed in real time. Out of the box, jLlama can graph CPU and Memory usage for Linux and Solaris servers.

The IEEE 1905.1 standard describes a convergent digital home network for heterogeneous technologies, such as PLC, WLAN, Ethernet and MoCA. This dissector enables Wireshark to understand, display and analyze IEEE 1905.1 traffic. It is implemented as a LUA script and can thus be easily plugged-into an existing wireshark installation. See the comments at the beginning of the file for hints on how to install the plugin.

phpTrafMon is a set of scripts written in php. It shows in an attractive and user-friendly way the traffic in a local network and a share in it of every user. phpTrafMon requires MySQL, crontab and a popular IPFM program.