4
votes

Open Source Linux network analyzer

Which are there? What features do they offer?

11 Answers 11

22
votes

What exactly do you need?

  • wireshark - network sniffer/analyzer
  • iftop - bandwidth usage
  • darkstat - traffic analyzer
  • nmap - network port scanner
  • nessus - vulnerability scanner
  • metasploit - penetration testing
  • Worked for me, thx – Martin K. Jul 23 '09 at 13:45
5
votes

Can't believe nobody mentioned tcpdump. Click on the link to see the list of features

4
votes

ntop is a solution that has been around for a while, can be extended with plugins. Here is a short how-to.

3
votes

Wireshark (formerly ethereal) is my favorite.

3
votes

A few more:

  • lanmap2 - sits quietly on a network and builds a picture of what it sees.
  • kismet - wireless sniffer
  • nikto - web server scanner
  • nast - another network sniffer/analyzer
1
vote

A missing tool from the list is ettercap. A text-based tool to analyse a subnet and perform active or passive scans of the subnet. It can also monitor packets and display streams.

1
vote

If you need a network traffic analyzer you can use tshark (it's the console version of wireshark).

0
votes

MRTG for nice pretty pictures and graphs (management p0rn) via SNMP monitoring. does everything i need, but if u dont list your requirements its quite hard to guess what you want.

0
votes

p0f - passive OS fingerprinting (http://lcamtuf.coredump.cx/p0f.shtml)

0
votes

for reconaissance / mostly real time analysis:

  • tshark - text-only version of wireshark when tcpdump is too cryptic.
  • httpry - simple nice passive http protocol sniffer.
  • ngrep - displays payload of selected traffic
0
votes

If you need a network intrusion IDS/IPS tool, Snort is one such open source tool.

Not the answer you're looking for? Browse other questions tagged or ask your own question.