Software Map

HATop is an interactive ncurses client and real-time monitoring and statistics displaying tool for the HAProxy TCP/HTTP load balancer. HATop's appearance is similar to top(1). It supports various modes for detailed statistics of all configured proxies and services in near real-time. In addition, it features an interactive CLI for the HAProxy Unix socket. This allows administrators to control the given HAProxy instance (change server weight, put servers into maintenance mode, etc.) directly out of HATop (using keybinds or the CLI) and monitor the results immediately.

flowd is a small, fast, secure, and featureful NetFlow
collector. It supports NetFlow versions 1, 5, 7, and 9 over IPv4 and IPv6 transports, IPv6 flows (using NetFlow 9), filtering and tagging of received flows using a packet filter-like language, Perl and Python APIs, flexible storage (with run-time selection of which NetFlow fields are stored), reception of multicast flow datagrams, and privilege separation for security. The flowd distribution also includes a set of supplemental tools including analysis and SQL database support.

The Sleuth Kit is a collection of open source file
system forensics tools that allow one to view
allocated and deleted data from NTFS, FAT, FFS,
and EXT2FS images. The Autopsy Forensic Browser
provides a graphical interface to The Sleuth Kit.

dhcpy6d delivers IPv6 addresses for DHCPv6 clients, which can be identified by DUID, hostname, or MAC address, as in the good old IPv4 days. Addresses may be generated randomly, by range, or by arbitrary ID or MAC address. Clients can get more than one address, leases and client configuration can be stored in databases, and DNS can be updated dynamically.

With Snort2Pf, you can turn your local Snort
installation easily into an "intrusion detection
and prevention system", rather than simply using
it for post-mortem analysis. Such a system also
blocks the recognized violations.

smtp-vilter is a high-performance content filter for sendmail, which detects email viruses and spam. It can pass, discard, or simply mark an email based on the results of a content scan. It relies on third-party products for the actual content scan. It uses the milter API to communicate with sendmail, and backends to communicate with the actual scanning engines. The backends can be chained to perform a series of checks on each message in one run.

Suriwire is a plugin for Wireshark that displays Suricata generated alerts for a pcap file inside the Wireshark output. It adds the alerts to the packet details and in the expert info window. It also enables you to use signature fields as filtering items in Wireshark output.

Visual Interactive Datapipe (Vida) is an
interactive visual datapipe for all *nix systems,
which allows socket communications to be
redirected over pipes. It features an ncurses
interface that allows the creation of multiple
datapipes, each supporting multiple
connections. It is possible to sniff and log
traffic in various ways, hijack piped
connections, perform DNS hijacking on
switched LANs, and much more.

wzdftpd is designed to be a small, efficient, and highly modular/configurable FTP server for various platforms including Linux and Windows. The server is RFC compliant, multi-threaded and can be configured entirely online using SITE commands. You can write your own extensions to the server in your choice of language, extending on existing MySQL, PostgreSQL, SQLite, Tcl, Perl, PAM, and SFV plugins. Features include IPv6, TLS/SSL, UTF8, ACLs, VFS, events, scripting, plugins, job scheduler, bandwidth limitations, credits/sections, group administration, and customizable logging.

This patch integrates SecurID authentication services directly into the OpenSSH daemon, allowing users to use SecurID tokens directly as their passwords instead of relying on the clunky sdshell. It rides on the plain password auth architecture in OpenSSH to avoid requiring ChallengeResponse or securid-1@ssh.com style auth. It supports full privilege separation.

flashboot for OpenBSD is a set of makefiles, scripts, and support tools to build an OpenBSD image suitable for booting from read-only media, such as flash memory. The default image (smaller than 5Mb) is an image for a firewall/router with support for IPsec, SSH, IPv4 and IPv6 packet filtering, DHCP (client and server), and PPPoE. This image may be further trimmed or extended by editing the packing list files included in the distribution.

FusionInventory Agent is an generic inventory agent that can collect information from various sources including the local machine, network, and remote devices. It also has the ability to send Wake on LAN requests and
deploy software. The agent can be used with GLPI, Uranos, Rudder, Pulse2, and OCS Inventory.