Software Map

ifstat is a tool to report network interface
bandwith just like vmstat/iostat do for other
system counters. It can monitor local interfaces
by polling the kernel counters, or remote hosts'
interfaces using SNMP.

op allows fine-grained control of access to super-user privileges
through easy-to-remember mnemonics. It features user- and host-based
access control, command expiration, netgroup support, drop-in
configuration files, and more.

S-terminal lets you create a secure X terminal. Regular X terminals pass unencrypted data between you the remote machine. S-terminal creates an encrypted tunnel through which all X traffic passes. It replaces the remote xdm login screen with a local application that collects username and password, then sets up an ssh tunnel to the remote host and starts a session. It is highly configurable both in appearance and behavior, and deployed S-terminals can be remotely administered. Best of all, it can be added to a KNOPPIX CD to create an instant, bootable, secure X terminal CD.

BATTS (Barnhard Associates Trouble Ticketing
System) is a lean, elegant trouble ticket system with both command line and Web interfaces, written in Perl. It uses MySQL for its backend, and has a ticket-via-email interface for submission and informational logging. Features include support for tickets pending on or resolved when other tickets are disposed of, an ability to assign tickets to a person, an ability to categorize and prioritize tickets, and associating billing codes with various logging events.

fsv, the 3D File System Visualizer, allows you to view a collection of directories and files as three-dimensional geometry. It represents all or part of a filesystem as a collection of blocks of varying sizes, each labeled with a filename, and arranged in a manner consistent with the original directory structure. fsv can visualize any arbitrarily large collection of files, limited only by memory and hardware constraints. Program features include an integrated 2D interface, intelligent camera handling, and extensive use of animation. fsv requires OpenGL.

changedfiles is a framework for filesystem replication, security monitoring, and/or automatic file transformations--essentially any application where you'd poll files or directories and either do something to them or send them somewhere else (or both). The difference is that the kernel tells you when they change instead of you having to poll. It's an easy real time FTP push mirror to one or multiple sites. It's also a full fledged MySQL client, so you can do realtime database operations (for example, batch imports). It consists of two parts: a kernel module (works with Linux kernel version 2.4) which reports to a device whenever a file on the filesystem changes, and a daemon which runs in user space and can be configured to do almost any action when a change to a file matching the one of the patterns it looks for is reported. The kernel module is SMP safe and has been tested on Intel, PowerPC, and Alpha.

FIRE, the Forensic and Incident Response Environment, (formerly known as Biatchux) is a portable, bootable CD-ROM-based distribution providing an immediate environment for performing forensics analysis, data recovery, virus scanning, and pen-testing. It also provides the necessary tools for live forensics/analysis/incident response.

Advisory Check is a program that reads security advisories for you. It gathers security advisories using RSS, RDF, or XML feeds, compares them against the installed software, and alerts you if you're vulnerable.
A wide variety of package managers can be queried to detect installed software. Remote systems can be monitored by using the integrated SSH, Windows-RPC, and Nmap support.

Rover provides a means of executing commands on remote machines via SSH, Telnet, or Rlogin. Connections are made and then managed using the Expect for Perl module. Rover can process many hosts in parallel. It comes with two interface programs, rover and rovergtk. The first is a command line tool with a built-in shell and batching capabilities; the other uses a Gtk interface to configure and use Rover.

Ortro is a framework for enterprise scheduling and
monitoring. It allows you to easily assemble jobs
to perform workflows and run existing scripts on
remote hosts in a secure way using ssh. It also
tests your Web applications, creates simple
reports using queries from databases (in HTML,
text, CSV, or XLS), emails them, and sends
notifications of job results using email, SMS,
Tibco Rvd, Tivoli postemsg, or Jabber.

Usepackage is a tool for managing the Unix
environment for a multi-tool, multi-platform site.
It is designed to simplify login scripts and allow
administrators to control users' environments
centrally. This tool should be considered
primarily designed for sites where users have to
deal with a number of different tools, or versions
of tools, that are installed in different
locations and require environment variables to be
set. This is particularly a problem for
developers, or anyone who has to manage a large
toolset across multiple platforms (e.g. different
versions of the Sun JDK which require various
environment variables to be set correctly). One or
more central configuration files control a number
of different "packages" and their associated
environment and dependencies for different
platforms (this includes the standard PATH,
MANPATH, and LD_LIBRARY_PATH variables). A single
user command, use, can be invoked to source the
appropriate environment information into the
users' current shell.

MIDAS NMS is a highly configurable network
monitoring and network intrusion detection
server. It uses a distributed client/server
model that allows it to scale to very large
networks, and features highly optimized Snort
support that dramatically reduces the
overhead of both the Snort Sensor and the
alert data repository. It also supports
Netsaint/Nagios plugins and Big Brother
clients, allowing for easy migration.

Geolizer is a patch for Webalizer that uses the
GeoIP library to generate faster and more reliable
geographic statistics than the default DNS suffix
method. It is recommended that DNS reversal be
disabled on your HTTP server for improved
performance and more accurate statistics. It also
supports country flag pictures, can be compiled
under MinGW/MSYS, and features a human-readable
transfer size display.