Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Here in a list of tools I install after a fresh install (debian most of time):

  • logcheck: to check the log files and generate reports
  • apticron: send me e-mails when packages updates are available
  • aide: to check the system integrity
  • vim: ;-)
  • ethtool & ifstat: to get my network interface speed
  • denyhosts or fail2ban: to block bruteforce ssh connection attempts
  • chkrootkit: check for rootkits
  • openntpd: for ntp synchro
  • upgrade-system: to keep the system up-to-date


  • sysstat: system statistics (iostat, sar...)

and you? do you know any other useful tools?

share|improve this question

closed as primarily opinion-based by masegaloeh, mdpc, Andrew Schulman, dawud, Xavier Lucas Mar 28 '15 at 13:31

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise.If this question can be reworded to fit the rules in the help center, please edit the question.

This should probably be a community wiki – pauska Nov 30 '09 at 15:07
and chkrootkit is useless, if you are running it on the host... – asdmin Nov 30 '09 at 18:02
duplicate?… – warren Nov 30 '09 at 23:52

screen... when its not there your workstation is 100% more likely to crash.

share|improve this answer

There are similar post here

share|improve this answer

I'd recommand the following tools:

  • munin(-node): monitoring ressources
  • htop
  • nload
  • nmap
  • dnsutils
  • smartmontools
  • ntpd
share|improve this answer

sysstat - for system resource monitoring, always useful. More information on this post.

share|improve this answer
thank you Coops ! – Matthieu Nov 30 '09 at 15:06

I'd throw in

  • gnu bc
  • wireshark/tshark
  • openssl (encrypting log files)
  • deborphan (check for unused packages later)
  • svn (I manage /etc with it)
  • dmidecode (it can come handy sometimes)
  • make, m4 and sqlite3 (i generate configuration files with repeating pattern)
  • mutt (a good MUA is a must)
  • any kind of ntp daemon, but you have mentioned it
  • p7zip (can come handy with exotic compression formats)
  • rsync
  • screen

as well ;)

share|improve this answer


  • tcptraceroute (great for troubleshooting when idiots block ICMP)
  • iptraf (great for watching bandwith usage in realtime)
  • vmware tools (I know, specific to vmware installs, but people often forget this and then complain about time skew)


  • thttpd (redirect-only to simplify life for users who keeps accessing when they should be accessing
  • ee (make life happy for those old FreeBSD admins)
  • postfix (simply because we want to use the same MTA for both remote and local mailservices)
share|improve this answer

PSAD is a collection of three lightweight system daemons (two main daemons and one helper daemon) that run on Linux machines and analyze iptables log messages to detect port scans and other suspicious traffic. A typical deployment is to run psad on the iptables firewall where it has the fastest access to log data.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.