Open Source Perl Network Monitoring Software

Net-SNMP provides tools and libraries relating to the Simple Network Management Protocol including: An extensible agent, an SNMP library, tools to request or set information from SNMP agents, tools to generate and handle SNMP traps, etc.

Pandora FMS is an enterprise-ready monitoring solution that provides unparalleled flexibility for IT to address both immediate and unforeseen operational issues, including infrastructure and IT processes. It uniquely enables business and IT to adapt to changing needs through a flexible and rapid approach to IT and business deployment. Pandora FMS consolidates all the needs of modern monitoring (ITOM, APM, BAM) and provides status and performance metrics from different operating systems, cloud, virtual infrastructure (VMware, Hyper-V, XEN), Docker containers, applications, storage and hardware devices such as firewalls, proxies, databases, web servers or routers. It's highly scalable (up to 2000 nodes with one single server), 100% web and with multi-tenant capabilities. It has a very flexible ACL system and several different graphical reports and user-defined control screens.

nagiosgraph parses output and performance data from Nagios plugins, stores the data in RRD files, and creates graphs and reports from the data. Graphs and reports can be embedded in Nagios. Easy to setup, highly customizable, and few dependencies.

PNP is an addon for the Nagios Network Monitoring System. PNP provides easy to use, easy to configure RRDTools based performance charts feeded by the performance data output of the Nagios Plugins.

SNMP Trap Translator is used to 'translate' traps received from the NET-SNMP / UCD-SNMP snmptrapd trap daemon into easy to understand messages.

Collectl is a light-weight performance monitoring tool capable of reporting interactively as well as logging to disk. It reports statistics on cpu, disk, infiniband, lustre, memory, network, nfs, process, quadrics, slabs and more in easy to read format.

The Open IPMI project aims to develop an open code base to allow access to platform information using Intelligent Platform Management Interface (IPMI).

Netdisco is an SNMP-based L2/L3 network management tool designed for moderate to large networks. Routers and switches are polled to log IP and MAC addresses and map them to switch ports. Automatic L2 network topology discovery, display, and inventory.

SIGAR (System Information Gatherer and Reporter) is a cross-platform, cross-language library and command-line tool for accessing operating system and hardware level information in Java, Perl and .NET.

OSSIM, AlienVault’s Open Source Security Information and Event Management (SIEM) product, provides event collection, normalization and correlation. For more advanced functionality, AlienVault Unified Security Management (USM) builds on OSSIM with these additional capabilities: * Log management * Advanced threat detection with a continuously updated library of pre-built correlation rules * Actionable threat intelligence updates from AlienVault Labs Security Research Team * Rich analytics dashboards and data visualization

NfSen is the web based front end for the nfdump netflow tools. See http://nfdump.sourceforge.net. Current stable release is 1.3.6

Ganglia is a scalable distributed monitoring system for high-performance computing systems such as clusters and Grids. It is based on a hierarchical design targeted at federations of clusters. Supports clusters up to 2000 nodes in size.

BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a web front-end to query and analyze the alerts coming from a SNORT IDS system.

A network access control (NAC) system featuring a captive-portal for registration and remediation, wired and wireless management, 802.1X support, isolation of devices, integration with IDS; it can be used to secure networks from small to large. Source code is hosted here: https://github.com/inverse-inc/packetfence Issue tracker tracker is hosted here: http://www.packetfence.org/bugs/

LCDproc controls various LCD and VFD devices in a standardized way, and ships with a client to display various system statistics. Supports multiple platforms (Linux, *BSD, Solaris). Client/server model allows multiple clients to use one display.

Webminstats is a Webmin's module which display a graphical log of historic information. It's modular in design, as to be able to log everything from CPU usage to email box size.

Master/node to gather and graph "everything" on your systems using Tobi Oetiker's rrdtool. It can optionally warn your surveillance software. This software package was originally called LRRD. The project. Please see http://munin-monitoring.org/

The tool offers you end-to-end views of your storage environment including LAN and SAN and can save you significant money in operation monitoring and by predicting utilization bottlenecks in your virtualized environment. You can also generate policy-based alerts, view overall health status of your systems, reduce service downtime, use capacity and forecasting data - Real-time storage performance visibility in LAN and SAN multi-vendor environment - Historical reporting (graph, CSV, PDF) - Alerting based on performance thresholds - Storage event monitoring The tool supports enterprise class level storage devices from major storage vendors like: IBM, Dell EMC, NetAPP, HPE, Hitachi, Lenovo, Pure Storage, Huawei, Dot Hill, INFINIDAT, Fujitsu, DataCore, Quantum, QNAP, FalconStor,Ceph, Synology, RAIDIX, Qumulo,Inspur,Veritas Monitoring of the SAN supports Brocade, Qlogic and Cisco SAN switches Monitoring of the LAN network Try demo at http://demo.stor2rrd.com

Big Sister is an SNMP aware network and system monitor

FlowViewer provides a convenient web-based user interface to Mark Fullmer’s flow-tools suite and CMU's netflow data capture/analyzer, SiLK. The inclusion of the underlying SiLK tool set enables FlowViewer users to continue to use the tool with the newer IPFIX netflow data protocol, which includes support for IPv6 and Cisco's v9 and FNF netflow. FlowViewer has been developed for NASA’s Earth Sciences Data and Information System (ESDIS) networks, and credit goes to NASA for their usual outstanding support of innovation. The FlowViewer tools provide additional graphing and tracking features by utilizing open source software including Thomas Boutrell’s gd, Lincoln Stein's GD, Martien Verbruggen's GD::Graph, and Tobias Oetiker’s RRDtool. FlowViewer v4.6 fixes non-UTC local time environments for FlowViewer and FlowGrapher, and $no_devices_or_exporters FlowMonitor_Collector problem. **Note: SiLK must be v3.8.0 or later. Version 3.9 handles sFlow data.

Ddclient is a Perl client used to update dynamic DNS entries for accounts on 'Dynamic DNS Network Services' free DNS service. It currently supports a lot of different routers and a few different services. The project moved to github. See https://www.github.com/ddclient/ddclient for support.

Switchmap is a Perl program that creates HTML pages that show information about a set of Ethernet switches. It uses SNMP to gather data from the switches. Samples of Switchmap output can be found on the Project home page.

WebInject is a tool for automated testing of web applications and web services. It can be used to test system components with HTTP interfaces, as a test harness to create a suite of functional and regression tests, or for service-level monitoring.

The Network Tracking Database (NetDB for short) tracks all changes to the MAC address tables on your switches and the ARP tables on your routers over time stored in MySQL. It supports extensive switch, VLAN and vendor code reports from a CLI or Web App. NetDB can generate CSV reports, track the usage of static IP addresses, record neighbor discovery data and much more. There is now a VM "appliance" with easier upgrades available in the Files section. See the http://netdbtracking.sourceforge.net for more details.

FlowDoh is an NFSEN (nfsen.sourceforge.net) plugin that can... * Provide a real-time dashboard of the top-talkers on your network * Send email alerts based on network activity thresholds * Allow quick drill-down into detailed flow information * Record historical values so you can know if the network traffic is normal (Planned feature) FlowDoh can be used for multiple purposes: * Find hacked servers on your network * Identify users who are hogging bandwidth (such as peer-to-peer file-sharing) * Create a baseline of network statistics about your servers (planned feature) FAQ: Q: Why is it called FlowDoh? A: Because "'Doh!" is what you will say after installing FlowDoh and finding that some of your servers are already hacked. Another possible answer is this acronym: Flow-Dashboard-Of-Hogs.