Andrisoft WANGUARD is an enterprise-grade traffic monitoring and DDoS detection and protection solution that delivers the functionality NOC, IT, and security teams need to effectively monitor and protect their network through a single, integrated package. WANGUARD Sensor relies on sFlow, NetFlow, IPFIX, or Port Mirroring / SPAN.
Andrisoft WANSIGHT is a fully featured network traffic analyzer and collector. It provides in-depth traffic analysis, traffic accounting, and bandwidth monitoring, and enables you to generate complex traffic reports, graphs, and tops, instantly pin down the cause of network incidents, understand patterns in application performance, and make the right capacity planning decisions. It supports 10GbE packet sniffing and NetFlow, sFlow, and IPFIX.
Astaro Security Gateway (formerly Astaro Security Linux) is an all-in-one network security gateway that includes a firewall, intrusion protection, antivirus, spam protection, URL filtering, and a VPN gateway. Features include a modern packet filter, intrusion detection and prevention, portscan detection, application control, content filtering, virus detection for email and Web traffic, profile handling, L2TP, IPSec, SSL, and PPTP VPN tunneling, spam blocking, proxies for HTTPS, HTTP, FTP, POP3, SMTP, DNS, VoIP, SOCKS, and Ident, logging, and reporting. It supports Ethernet, VLAN, PPP, PPPoE, PPPoA, Cable Modem, IPv6, QoS, Link Aggregation, and WAN-Uplink-Load balancing in routing, and bridge mode. The WebAdmin GUI, Install Wizard, Change Tracking, Printable Configuration, and Up2Date service make it easy to install, manage, and maintain.
Borderline is a firewall generator. It takes a generic rule specification as input and generated an highly optimized firewall. It features IPv6 rule generation, support for multiple interfaces, and integrated support for network zones. It currently only supports firewall generation for Linux 2.6 (netfilter).
IP Tables State implements the "state top" feature from IP Filter for IP Tables. "State top" displays the states held by your stateful firewall in a "top"-like manner. Since IP Tables doesn't have a built-in way to easily display this information once, an option was added to iptstate to do this.
IPv6 CARE, "IPv6 Compliant Automatic Runtime Environment", provides an environment where applications instantly become IPv6-compliant ('patch' mode, see RFC6535). It can also generate a diagnosis about the IPv6 compliance of an application ('check' mode). It uses an LD_PRELOAD-based library injection technique.
Managed TFTP server is a TFTP server. The main TFTP class runs without modifications on Mono. It works both in IPv4 and IPv6 mode. It has correct retry behavior. It supports the following TFTP options: block size, transfer size, and timeout. It's possible to run in single port mode, which ensures that only port 69 will be used for TFTP transfers, simplifying firewall and router configuration. It supports many concurrent transfers. It runs as a Windows service. It supports multiple TFTP servers on different endpoints, each serving its own root directory. It has an advanced MSI-based installer. It logs to the windows event log. It has a permissive MIT license so it can be used in commercial projects.
MasarLabs PatD is a daemon to ping or traceroute remote hosts, using IPv4 or IPv6 ICMP packets. It runs without root privileges, listening on a TCP local port for hosts to check. It uses a protocol simple to implement, so is useful in situations in which you cannot send native ICMP packets (for example, from a Java program). pat is a client you can use to talk to patd.