Packets

etPacket::IGMP is a Perl module to assemble and disassemble IGMP (Internet Group Mangement Protocol) packets. SYNOPSIS use NetPacket::IGMP; $igmp_obj = NetPacket::IGMP->decode($raw_pkt); $igmp_pkt = NetPacket::IGMP->encode(params...); # Not implemented $igmp_data =... Platforms: *nix

Useful Traffic Accounting Dragon is a traffic accounter that actually gives useful information about traffic instead of stupidly counting incoming/outgoing packets. Dragon accounts traffic by user, program and timestamp and puts this information into useful correlation. Dragon is implemented... Platforms: *nix

Sniff formats hex packets from the tcpdump program and converts them to ASCII to make them easier to read and understand.. The place to post your linux questions without hassle Platforms: *nix

TinyRadius is a small, fast and reliable Java Radius library which is capable of sending and receiving Radius packets of all types. It does not provide a fully-fledged Radius server, but helps you to implement Radius services in your application.. Platforms: *nix

HttpCapture is a core wrapper around the packet-capture library pcap and a framework for building plugins to filter, analyse, or display interesting network packets. The core of the application is minimal, and a collection of plugin libraries are used to actually process the packets. The... Platforms: *nix

IPMENU is a user interface to Netfilter/iptables and Linux policy routing or traffic control, allowing you to edit firewall rules and configure the firewall to "mark" packets for policy routing or for class based queueing (CBQ). Netfilter is the Linux 2.4 subsystem for configuring a multi-homed... Platforms: *nix

In an effort to be able to play Halo 2 with some out of state friends, I wrote an xbox system link proxy that would essentially bridge only xbox network traffic across across layer 3 networks using UDP. Written in C and uses libpcap and libnet. A later update added multicast support so Apples... Platforms: *nix

Arphound project is a tools that listens to all traffic on an ethernet network interface, and reports IP/MAC address pair, as well as events such as IP changes, IP conflict, IP addresses with no RDNS, various ARP spoofing, and packets not using the expected gateway. Reporting is done to stdout,... Platforms: *nix

rshaper is a Linux kernel module that limits the incoming bandwidth for packets aimed at different hosts. While the former issue can be addressed with the conventional shaper driver, the latter cant be easily addressed by the standard shaper. As a matter of facts, I have not been able to use... Platforms: *nix

NetPacket::ARP is a Perl module to assemble and disassemble ARP (Address Resolution Protocol) packets. SYNOPSIS use NetPacket::ARP; $tcp_obj = NetPacket::ARP->decode($raw_pkt); $tcp_pkt = NetPacket::ARP->encode(params...); # Not implemented NetPacket::ARP provides a set of routines for... Platforms: *nix

raddump interprets captured RADIUS packets to print a timestamp, packet length, RADIUS packet type, source and destination hosts and ports, and included attribute names and values for each packet. Whats New in This Release: - Added support for IEEE 802.1q tagged VLAN frames.. Get raddump... Platforms: *nix

FIAIF is an Intelligent Firewall. Unlike many other scripts, FIAIF can be truly customized allowing multiple interfaces (or rather zones). There is no limit on the number of zones. All configuration is done through configuration files. There is no need to understand the script behind it all.... Platforms: *nix

Hogwash Light BR is an Intrusion Prevention System that can filter packets directly in the layer 2 of the OSI model (so the machine doesnt need even an IP address). Detection of malicious/anomalous traffic is done by rules based in signatures, and the user can add more rules. It is an efficient... Platforms: *nix

Hogwash is an inline packet scrubber that uses Snorts detection engine to drop malicious packets before they reach the target. The original version of what is now hogwash was written in 1996 while I was at Idaho State University. I had a web server that when patched, broke the software it... Platforms: *nix

ETrace is a configurable static port network tracing tool, similar to traceroute, but supporting ICMP, TCP, UDP and other IP protocols. Usage: etrace [ -BbCcnv ] [ -p profile ] [ -F config ] [ -i interface ] [ -I icmp-type ] [ -T port ] [ -U port ] [ -P protocol ] [ -r probe-count ] [ -t... Platforms: *nix

DNA (Deep Network Analyser) is an open, flexible, and extensible deep network analyzer server and software architecture for passively gathering and analyzing network packets, network sessions, and applications protocols. Deep Network Analyser project is designed to be used for Internet... Platforms: *nix

pcap2c converts a pcap capture file (such as one from Ethereal/Wireshark or tcpdump) into a C source file, where the packets are stored as unsigned char arrays. These packets can then be compiled into a C program where they can be easily used for further manipulation, retransmission, etc.... Platforms: *nix

Now you can find out without even logging into the box by only analyzing the packets on the network! Every wonder if someone is remotely logging in to one of your boxen and then going on to another? Now you can find out without even logging into the box by only analyzing the packets on the... Platforms: *nix

Perro software is a set of three daemons that logs incoming IP/TCP, IP/UDP and IP/ICMP packets. Also produces detailed logs. Installation: 1) cd src 3) Edit the Makefile (only to set the install and log directories if you want a non-standard one). 4) make 5) make install. Platforms: *nix

libnetfilter_queue is a userspace library providing an API to packets that have been queued by the kernel packet filter. libnetfilter_queue library is is part of a system that deprecates the old ip_queue / libipq mechanism. libnetfilter_queue has been previously known as libnfnetlink_queue.. Platforms: *nix