mod_asn is an Apache module that uses BGP routing data to look up the autonomous system (AS) and the network prefix (subnet) which contains a given (client's) IP address. mod_asn is highly scalable. To do lookups in high-speed, it uses the PostgreSQL ip4r datatype, which is indexable with a Patricia Trie algorithm to store network prefixes. This is the most suitable algorithm, being able to search through around 250,000 existing prefixes quickly. mod_asn is usable as a standalone module, and the lookup result can be used by scripts or other Apache modules. For instance, a download redirector could base its decisions on the lookup result provided by mod_asn.
Netzob supports the expert in reverse engineering, evaluation, and simulation of communication protocols. Its main goals are to help security evaluators to assess the robustness of proprietary or unknown protocol implementations, simulate realistic communications to test third-party products (IDS, firewalls, etc.), and create an Open Source implementation of a proprietary or unknown protocol. Netzob provides a semi-automatic inferring process, and includes everything necessary to passively learn the vocabulary of a protocol and actively infer its grammar. The learnt protocol can afterward be simulated. Netzob handles text protocols (like HTTP and IRC), fixed field protocols (like IP and TCP), and variable field protocols (like ASN.1-based formats).
dhcpy6d delivers IPv6 addresses for DHCPv6 clients, which can be identified by DUID, hostname, or MAC address, as in the good old IPv4 days. Addresses may be generated randomly, by range, or by arbitrary ID or MAC address. Clients can get more than one address, leases and client configuration can be stored in databases, and DNS can be updated dynamically.
Gnetworktester is an application that helps users in testing the quality of a network connection and in sending complaints on that to the network provider. A procedure of testing takes three steps: choosing the network nodes; automatic pinging of those nodes to collect statistics on packet losses, delays, and overall quality; and automatic report writing.
Altimate Firewall is a small and easy-to-use firewall, based on a hardened Gentoo system. It has an intuitive and easy-to-use Web interface. The Altimate Firewall uses Shorewall (LAN, WAN, DMZ), OpenVPN, PPTPD, IPSEC, and many more. It includes Avira WebGate and MailGate for safer browsing and for securing your email messages. The network settings can be easily managed by a non-professional.
By using the nmblookup facility from Samba, and configuring hosts to use the WINS service, IP-ID lets you resolve named hosts within your local network. As an added feature, IP-ID can discover and add a hostname for an Xbox running XBMC, allowing simple and repeatable FTP transactions with the Xbox. By drawing on the functionality provided by the MiniUPnP project program, IP-ID can also configure UPnP port forwarding to machines to allow SSH access from the wider world.
sslsweep tests TCP services for the presence of SSL and reports things about the services found, such as the certificate's CN, the certificate's expiration timestamp, what kinds of ciphers the SSL service supports, and what versions of SSL the service supports. It can be used for security testing as well as ongoing monitoring of services. It can produce output in human readable text, HTML, and CSV. It can also run as a Nagios plugin. It can accept input on the command line or on standard input (one host:port pair per line). It can also accept Nmap scan output (in the greppable format) as input, and it will test all open TCP ports found by the Nmap scan.
Dandelion is a 3D graph rendering application which can be controlled across a network. Its main purpose is to allow clear network graphs to be rendered in a window, which can be controlled by a separate application or the user. The Dandelion visualization is actually controlled by issuing simple commands to it across the network (although this could all be happening on a single machine). The Dandelion source includes a set of very simple libraries which can be incorporated into other applications and which can be used to send these commands. Libraries are included for C, C#, Java, and Python. The project was developed at Liverpool John Moores University within the PROTECT Centre.