Vtstats’s purpose is to report ServerKit runtime statistics on a virtual terminal periodically, optionally with screen blanking disabled in the interests of keeping recent statistics available in the face of system failures, overloads, or access restrictions regardless of console inactivity.

The information displayed is the same information you see on the server processes output upon delivery of SIGUSR1, but the vtstats report loop is unrelated to the builtin ServerKit signal-driven statistics report beyond sharing the same reporting function.

When used along with disabled screen blanking and vt activation enabled, this module takes advantage of the characteristic of frame buffers to independently continue displaying the contents of memory regardless of the overall system health/state. Even when the machine is frozen the RAMDAC continues “displaying” the contents of video memory.

If you do not disable screen blanking, you lose the ability to simply attach a display adapter and view the current video memory contents in situations where the machine is unable to respond to keypresses or other events that would normally unblank the screen. (lockups)

Usage

It is advised that you read the ServerKit documentation before trying to use this module, as most of the basic usage is simply using ServerKit, nothing specific to this module.

To integrate vtstats into existing ServerKit personalities, simply add the vtstats.so module to the existing personalities modules subdirectory. Configuration of the vtstats module is achieved through adding a vtstats section to your existing c11n file.

Vtstats will generally require a server process that starts as root so it can manipulate /dev/console. It is recommended that you configure the personality to switch users using the uid and gid directives when executing as root. Note that in order for ServerKit to allow root execution, the executes_as_root configuration option must be set to true.

Note:

ServerKit versions 1.2.0 and earlier contain a bug in the reporting function which ignores the supplied FILE * and prints directly to stderr. If when vtstats reports statistics you get some of the statistics printed to stderr instead of the virtual terminal, your ServerKit has the bug.

Configuration options for the vtstats section:

period, integer, default=5:
How long to wait in seconds between reports

vt_number, integer, default=0:
Which virtual terminal to use, these are the “virtual consoles” you
access with alt-fN generally in linux. Setting to 0 instructs vtstats
to find the next available vt.

activate_vt, boolean, default=false:
Set to true if you want vtstats to “activate” the vt being used, this
will result in the “focusing” of the vt being used for statistics so
they will be on-screen without intervention, which incidentally also
adds scrollback history until the focus is changed.

disable_blanking, boolean, default=false:
Set to true if you want vtstats to disable the blanking & powersave
features of the console driver. Generally in datacenters there are no
permanent displays connected to the servers so this doesnt produce a
huge waste of energy in that case. It is useful because if a server is
frozen, and the screen has been blanked, it will not be able to respond
to a keypress (or other user generated event) to unblank the screen.
Thus rendering the likely present statistics in video memory
inaccessible because they are not being actively displayed .

Generally, this module will require that your personality start as root. All
of the vtstats open and ioctl operations occur during the “prestart” phase of
server initialization. The “prestart” phase occurs before any user switching is done so starting as root is effective in allowing vtstats to manipulate
/dev/console. To keep things sane, you should use the uid & gid core server configuration options to drop root privileges after performing all prestart duties.

It’s common to start personalities as root anywyas, because things like binding to port 110 (for a pop server) or port 80 (for http server) require root. In these cases adding vtstats is simplest.

Here is a sample configuration of a r2d2 pop3 server personality c11n file which configures both the r2d2 and vtstats modules:

identity = pop3
executes_as_root=true
uid = 11000
gid = 11000

database testdb {
name = testdatabase
user = foo
password = bar
host = localhost
pool_max = 100
pool_min = 1
}

vtstats {
activate_vt = true
disable_blanking = true
period = 1
}

r2d2 {
max_threads = 10
min_threads = 1
database = testdb
port = 1100

#TLS-related options below
tls_port = 9950
tls_address = 0.0.0.0
x509_key_file = “x509-server-key.pem”
x509_cert_file = “x509-server.pem”
}

The above disables blanking, enables the vt switch, sets a period of 1 second (1HZ) and uses the default behavior of finding the next available VT.

It’s as simple as adding a vtstats section to your c11n file to change the
defaults, and adding the vtstats.so to your modules directory either by placing the module there or symlinking it from there.

Requirements:

· ServerKit

What’s New in This Release:

· Updated report method to be ServerKit 2.x compatible
· Added c11n and run files
· Cleaned up some blanking-disable related things

Sources mirror 1 (tar.gz)

Gnome System Monitor has some nice features, such as a tree view for process dependencies, icons for processes, the ability to hide processes that you don’t want to see, graphical time histories of CPU/swap/memory usage, the ability to kill/renice processes needing root access, as well as the standard features that you might expect from a process viewer.

Installation:

The simplest way to compile this package is:

1. `cd’ to the directory containing the package’s source code and type `./configure’ to configure the package for your system. If you’re using `csh’ on an old version of System V, you might need to type `sh ./configure’ instead to prevent `csh’ from trying to execute `configure’ itself.

Running `configure’ takes awhile. While running, it prints some messages telling which features it is checking for.

2. Type `make’ to compile the package.

3. Optionally, type `make check’ to run any self-tests that come with the package.

4. Type `make install’ to install the programs and any data files and documentation.

5. You can remove the program binaries and object files from the source code directory by typing `make clean’. To also remove the files that `configure’ created (so you can compile the package for a different kind of computer), type `make distclean’. There is also a `make maintainer-clean’ target, but that is intended mainly for the package’s developers. If you use it, you may have to get all sorts of other programs in order to regenerate files that came with the distribution.

Requirements:

· libwnck

What’s New in This Release:

· ‘Arguments’ column is now correctly escaped for markup. Josh Lee. Closes #498569.
· Graph improvements by Karl Lattimer – new developer.

Sources mirror 1 (tar.gz)

Sources mirror 2 (tar.bz2)

NagVis can be used to visualize Nagios Data, e.g. to display IT processes like a mail system or a network infrastructure.

Requirements:

· Nagios (2.x branch)
· MySQL (recommended)

Installation:

STEP 1

Get NagVis, the latest test release can be found at www.nagvis.org

STEP 2

Place the NagVis directory tree into your Nagios share Folder
(usally /usr/local/nagios/share).

STEP 3

DONT move any files or folders inside the NagVis directory! (In fact you can move,
but in this case you have to change the main config file – if everything is left
untouched it should run “out of the box” without changes to the config)

STEP 4

!!! IMPORTANT !!! >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Check the main config file (etc/config.ini.php) to fit your system!
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
STEP 5

Make sure that the Webserver User can write to the NagVis etc directory.

E.g. issue the following as root (change pathes according to your installation) :
chmod 665 -R /usr/local/nagios/share/nagvis/etc/maps/
chmod 665 -R /usr/local/nagios/share/nagvis/maps/
chmod 665 /usr/local/nagios/share/nagvis/etc/config.ini.php

(You can even set less than 665 if you know what you’re doing and the groups are set fine)

STEP 6

If you want to use the Config Tool
call http://[nagiosserver]/[path_to_nagvis]/config.php and do a right-click

You should now be able to create new config files. (Make sure the Webserver
can write to the etc directory!).

!!! IMPORTANT !!! >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
The Config Tools DOES NOT display the current Nagios States of Objects
configured. Its only for configuring! To “use” your configured Maps
afterwards see STEP 7!
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
If this does not work for you, you can simply edit the Map config files in the etc/maps/ directory by hand, see “Map Config File Format” document at www.nagvis.org for doing this.

What’s New in This Release:

· The map rotation feature has been recoded: map rotation can be stopped and restarted on demand.
· There is a countdown to the next reload/rotate in the header menu.
· It can be included to the map in a textbox via macro.
· You can also define several map rotation pools in the main configuration. Dynamic Favicon has been added to increase comfort when using tabbed browsing Better value validation has been added to prevent incorrect configuration.
· Performance (map load time) has been improved by up to 50%.

Sources mirror 1 (tar.gz)

Sources mirror 2 (tar.gz)

Sources mirror 3 (tar.gz)

Menace is written in PHP for the web pages and Python for the parser. They both depend on a mysql database. Menace stands for Managed Eye of Network Attacks with a Complete Engine.

INSTALLATION:

Method A – 1 Server:

Make a DB and user for menace

Run ./install.sh

In the webdir edit db.php and in the parser scanner.py to have the db details you created

Method B – 2+ Servers:

Make a DB and user for menace and allow connections from the other servers
Run ./install.sh and only install the web part on the DB server
In the webdir edit db.php and in the parser scanner.py to have the db details you created
Copy the Parser Directory so the program can run on the other servers

Requirements:

· Python
· MySQL

Sources mirror 1 (tar.gz)

Usage:

Examples usage of utilities:

General:

Window 1:
./auditd
Window 2 (you don’t have to have the daemon running to try this, but
enabled has to be 1):
./auditctl -s
./auditctl -a entry,always -S open
ls
./auditctl -d entry,always -S open

Identity tracking:
./auditctl -a exit,always -S all -F loginuid=2000
./auditctl -L 2000,”test uid”

What’s New in This Release:

· system-config-audit was updated to version 0.4.5.
· The “week-ago” keyword was added to aureport and ausearch start and end times.
· Audit log permissions on rotate were fixed.
· If a file’s group is root, then the permissions are set to 0400, otherwise they are set to 0440.
· A RACF zos remote audispd plugin was added.
· An event queue overflow action was added to audispd.

RedHat SRPM mirror 1

Sources mirror 1 (tar.gz) 

NDisc6 is primarily meant for IPv6 networking diagnostics or to detect rogue IPv6 nodes or routers on an Ethernet segment.

What’s New in This Release:

· This release adds an ICMPv6 DNS servers discovery daemon, and fixes name2addr and addr2name inversion.

Sources mirror 1 (tar.bz2)

The statistics generated by vmstat are collected and visualized using rrdtool.

Sources mirror 1 (tgz) for Kernel 2.6

Sources mirror 2 (tgz) for Kernel 2.4

Low overhead. GUI controls. Formatted report in window. Sample interval down to 0.1 secs. Choose font size. System resources: CPU (1-4), memory (free/used/cache), page faults (hard/soft), disk IO, network IO. Process resources: same + execution file name.

Here are some key features of “Watsup”:

· overhead is about 1/3 as much
· sample interval as low as 0.1 seconds is supported
· overall system and top process resources are shown on one page
· disk I/O, network I/O, and page fault rates can be monitored
· font can be made small (for display in a corner) or large (whole screen)
· the top N processes are displayed with minimal jumping around between samples
· (which makes it easier to watch one or a few processes)
· process ranking is a weighted sum of CPU, hard page faults, and disk I/O

Requirements:

· GTK+ version 2.8.x
· Standard GTK app.
· C++ compiler
· libgtk2-dev needed if you want to rebuild

What’s New in This Release:

· GUI was made multi-language capable, and a German version is now available.
· The build script allows user choice of install location and desktop launcher.
· Fixed crash from attempt to open a non-image file.

Sources mirror 1 (tar.gz)

lkmonitor tries to offer detailed information of the characteristics of the system, as type of cpu, state of the memory or the file system registered in kernel.

lkmonitor is an open source project with information about the source code and software architecture to make easy the development of new characteristics.

What’s New in This Release:

· Added. Embedded documentation
· Changed. Fails during the reading of devices info doesn’t call g_error but g_critical
· Fixed. Crash in machines without net devs information file. GtkComboBox becomes disabled when no NIC’s are present.
· Fixed. Integer overflow in network panel.
· Updated Urdu translation. (Thanks to Abid Sidique).

Debian DEB mirror 1

RedHat RPM i386 mirror 1

RedHat RPM x86 64 mirror 2

Sources mirror 1 (tar.gz)

NetSPoC provides its own language for describing the security policy and topology of a network. The security policy is a set of rules that state which packets are allowed to pass the network and which not. NetSPoC is topology aware: a rule for traffic from A to B is automatically applied to all managed packet filters on the path from A to B.

Currently NetSPoC generates ACLs and static routing entries for

Cisco routers with or without firewall feature set,
PIX firewalls and
Linux iptables and ip route.

It supports network address translation, virtual IP addresses for redundancy protocols like VRRP and some dynamic routing protocols.

IPSec encryption is supported as well. A powerful syntax allows to easily define a large number of crypto tunnels of either a hub and spoke topology or a fully meshed topology. Crypto rules define which type of traffic needs to be encrypted. Crypto configuration for Cisco IOS routers and PIX firewalls is generated.

NetSPoC’s text based specification language is well suited for integration with CVS or other version control systems. A script is provided for tagging a policy and saving it to a policy database.

This software is actively developed with perl 5.8 under linux. It should be portable to other platforms where perl is available.

What’s New in This Release:

· The rule set can be better adapted to stateful and stateless devices.
· New “automatic” groups can be used for simpler definition of similar rules which affect a large set of objects.
· Loopback interfaces and negotiated interfaces are now supported.
· Support for Cisco VPN 3000 devices has been added, but currently isn’t well documented.
· More checks are done to prevent an inconsistent configuration.
· There are many other improvements and some bugfixes.

Sources mirror 1 (tar.gz)

Sources mirror 2 (tar.gz)