Frunk is a simple program that detects and reports interface status changes using SNMP. Basically, it detects if one or more of a set of pre-configured interfaces are up or down and reports the fact by emailing alerts. It is good for monitoring several interfaces on several devices, normally routers, and checking for link failures. It also optionally creates and constantly updates an HTML document containing information on those interfaces which are down.
MSNgrep is a script to capture MSN Messenger conversations. It uses pylibpcap to sort through MSN's jumble of packets for instant messages, a few status messages, and TypingUser notifications. Using these, it builds up a database of email addresses to MSN server addresses, and local IP addresses. This lets it match up an instant message to the sender's email address, and the receiver's email address.
Systime tells you how much CPU time running a program uses. It is like the classic "time" command, except that "time" only tells the CPU time used by the immediate process, whereas "systime" includes other processes that serve the main process, such as the X server and kernel memory management processes. Systime reports all the CPU time used on the entire system while the subject program was running. It uses Linux's /proc filesystem.
WMSServer is a PHP class that can be used to retrieve usage statistics of a Windows Media server. It uses a Windows COM object to connect to a Windows Media server, given a its host name and user name and password to retrieve the statistics. It can retrieve many types of statistics regarding the users connected to the Windows Media server, bandwidth usage, protocol type usage, etc.
GARP (Gnome ARP) is an ARP monitoring program written on Gnome with the GTK toolkit and Ruby. It takes ARP tables and some system variables via SNMP and ARP protocols and determines whether any machines have changed their IP address. It is useful for detecting new machines on the network and detecting which machine have changed addresses. It is intended especially for network admins.
mSuite is a solution for enterprise-wide infrastructure management. This solution uses Monolith Event Manager (Event/Fault), Action Manager (E&N), and Reporter (Historical Reporting). Monolith integrates with a variety of availability and performance tools based upon a client's needs. mSuite can monitor syslogs, SNMP traps, and NT event logs.
fwknop implements an authorization scheme called Single Packet Authorization that requires only a single encrypted packet to communicate various pieces of information, including desired access through an iptables, ipfw, or pf firewall policy and/or specific commands to execute on the target system. The main application of this program is to protect services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities much more difficult. The authorization server works by passively monitoring authorization packets via libpcap. Also supported is a robust port knocking implementation based around iptables log messages.