EtherApe is a GNOME/pcap-based etherman, interman, and "tcpman" clone. It displays network activity graphically. Active hosts are shown as circles of varying size, and traffic among them is shown as lines of varying width. It supports Ethernet, FDDI, Token Ring, ISDN, PPP, WLAN, and SLIP transports. It knows about VLANs, IP, IPv6, TCP, UDP, FTP, and a number of other protocols. Additional statistics windows will let you concentrate on protocols or nodes.
CoralReef is a comprehensive software suite developed by CAIDA for collecting and analyzing data from passive Internet traffic monitors in real time or from trace files. The package also includes programming APIs for C and Perl, and applications for capture, analysis, and Web report generation.
MCS MyRoute helps diagnose connectivity problems with detailed network routing discovery and analysis, providing visibility to poor-performing networks and devices. It includes a Java applet that enables remote users to easily test connections from the MyRoute server. Essential diagnostic tools including traceroute, ping, reverse DNS, and whois are combined into a single graphical interface that analyzes Internet connections, reporting quick and essential data points for finding connectivity problems. An IP location database identifies the geographical location of IP addresses and Web servers, showing the path of an Internet connection on a global map.
PasTmon (Passive Application Response Time Monitor) passively monitors your application servers, measuring and reporting user response times, throughput and congestion. It currently works with HTTP, telnet, rlogin, rsh, FTP (control channel), SMTP, POP3, and IRC. Measurements are recorded in a PostgreSQL database and are presented graphically via a PHP Web front-end using R statistical analysis scripts to create the plots.
The Bubbling Load Monitor (or "Bubblemon" for short) is a system load monitor for the GNOME panel. It looks like a vial containing water. The water level indicates how much (electronic) memory is in use. The color of the liquid indicates how much swap space is used. The amount of bubbles reflects the system CPU load. A message in a bottle indicates there is unread mail. A reed-like graph shows I/O load. On multi-core systems the CPU with the highest load will bubble in the middle, and the others on the sides, so it's possible to see how well load gets distributed between CPUs.
Stager is a system for aggregating and presenting network statistics. Though tailored for using NetFlow data from the flow-tools package, it is generic and can be customized to present and process any kind of network statistics. The backend collects data with flow-tools and stores reports in a database, automatically handling the aggregation of hourly statistics into days, weeks, and months. The Web frontend presents data in tables, matrices, or plots. The reports are fully customizable, and their definitions are stored in the database.
trend is a general-purpose, efficient trend graph for "live" data. Data is read in ASCII format from a file or continuously from a FIFO, and is played in real-time into a multi-pass trend (much like a CRT oscilloscope or a strip chart). trend can be used as a rapid analysis tool for progressive or time-based data series together with trivial scripting.
KeyFrog monitors the keyboard and visualizes its usage statistics. The user can obtain much information about keyboard activity: the intensity of keyboard usage, how was it distributed in time, which applications were used, etc. This may be very useful, for example, to developers to monitor their productivity. The environment being monitored is the X Window System (text applications are explicitly supported if run inside an X terminal).
TNV (The Network Visualizer or Time-based Network Visualizer) depicts network traffic by visualizing packets and links between local and remote hosts. It is intended for network traffic analysis to facilitate learning what constitutes 'normal' activity on a network, investigating packet details and security events, or for network troubleshooting. It can open saved libpcap (from tcpdump, windump, ethereal, etc.) formatted files or capture live packets on the wire, and export data in libpcap format or save the data to a MySQL database to enable the examination of trends over time.