network
Network Monitor and Application Firewall for macOS.
The Little Snitch Network Monitor shows you where your Mac connects to on the Internet. You decide what you want to allow or deny.
BIRD is an (not only) IP routing daemon.
The BIRD project aims to develop a fully functional dynamic IP routing daemon primarily targeted on (but not limited to) Linux, FreeBSD and other UNIX-like systems and distributed under the GNU General Public License.
BIRD is a dynamic IP routing daemon with full support of most modern routing protocols, easy to use configuration interface and powerful route filtering language, primarily targeted on (but not limited to) Linux and other UNIX-like systems and distributed under the GNU General Public License.
Real-time network diagnostics in your terminal. One command, zero config, instant visibility.
Launch → see every interface, connection, and health probe instantly. Arm the flight recorder before an incident disappears.
Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity. Zero-flag agent binary for deployment, aggregation server, offline ASN lookup.
Related contents:
Reticulum is the cryptography-based networking stack for building local and wide-area networks with readily available hardware. Reticulum can continue to operate even in adverse conditions with very high latency and extremely low bandwidth.
Related contents:
Grab your DNS logs, detect anomalies, and finally understand what's happening on your network. The missing piece between DNS servers and your data stack.
DNS-collector is a lightweight tool that captures DNS queries and responses from your DNS servers, processes them intelligently, and sends clean data to your monitoring or analytics systems.
Related contents:
WiFiman is here to save your network from sluggish surfing, endless buffering, and congested data channels.
- Detect available WiFi networks and Bluetooth LE devices instantly.
- Scan network subnets for additional details on detected devices, such as Bonjour, SNMP, NetBIOS, and Ubiquiti discovery protocols.
- Connect to your UniFi network remotely via Teleport - a free, zero-configuration VPN.
Block Unauthorized Network Communication via Command Line, Instantly. Instantly Block Network Access by PID/EXE.
ProcNetBlocker (Process Network Blocker) is a lightweight Windows command-line utility designed for system administrators, developers, and power users who need granular, real-time control over application network access. Stop unauthorized communication, sandbox suspicious programs, or manage bandwidth—all with a simple command.
Related contents:
Ralph is the CMDB / Asset Management system for data center and back office hardware.
Ralph is full-featured Asset Management, DCIM and CMDB system for data centers and back offices.
Netronome is a modern network speed testing and monitoring tool built with Go and React.
A complete network performance monitoring solution with distributed agents, real-time metrics, and beautiful visualizations.
Related contents:
Network Infrastructure Visualizer (Go-powered).
Atlas is a full-stack containerized tool to scan, analyze, and visualize network infrastructure dynamically. Built with Go, FastAPI, NGINX, and a custom React frontend, it provides automated scanning, storage, and rich dashboards for insight into your infrastructure.
Related contents:
Pings a number of targets at once, collecting their response times in histograms. Deploy at strategic points in your network to detect weak links and gain insight to your network's topology.
Lagident pings targets and collects information about response time and packet loss. The results are displayed through a scatter chart, which will (hopefully) help you identify anomalies across your network.
Plan your rack layout. Drag your devices in, move them around, export it. It runs in your browser. You can close the tab whenever you want.
Related contents:
a prettier way to inspect network connections.
a friendlier ss / netstat for humans. inspect network connections with a clean tui or styled tables.
Related contents:
Server Survival is an interactive 3D simulation game where you play as a Cloud Architect. Your mission is to build and scale a resilient cloud infrastructure to handle increasing traffic loads while fighting off DDoS attacks and managing your budget.
The above text dump is a traceroute. This particular one depicts your journey — or at least your packets’ journey — traversing the networks of the Internet to reach the server hosting this website. The preceeding traceroute and all future green-glowing text was generated on the fly, specially for you, during the loading of this website.
🛜 100+ offline-first networking tools and utilities.
Related contents:
Automatically discover and visually document network topology.
NetVisor scans your network, identifies hosts and services, and generates an interactive visualization showing how everything connects, letting you easily create and maintain network documentation.
Related contents:
Dynamic Routing on WireGuard for everyone.
Nylon is a Resilient Overlay Network built from WireGuard, designed to be performant, secure, reliable, and most importantly, easy to use.
flannel is a network fabric for containers, designed for Kubernetes. Flannel is a simple and easy way to configure a layer 3 network fabric designed for Kubernetes.
Flannel is responsible for providing a layer 3 IPv4 network between multiple nodes in a cluster. Flannel does not control how containers are networked to the host, only how the traffic is transported between hosts. However, flannel does provide a CNI plugin for Kubernetes and a guidance on integrating with Docker.
Related contents:
A "public suffix" is one under which Internet users can (or historically could) directly register names. Some examples of public suffixes are com, co.uk and pvt.k12.ma.us. The Public Suffix List is a list of all known public suffixes.
The Public Suffix List is an initiative of Mozilla, but is maintained as a community resource. It is available for use in any software, but was originally created to meet the needs of browser manufacturers.
Remembering the Sun Microsystems Network File System.
This website gathers material related to the Sun Microsystems Network File System, a project that began in 1983 and remains a fundamental technology for today’s distributed computer systems.
Networking component for interconnecting Pods and Services across Kubernetes clusters.
Submariner enables direct networking between Pods and Services in different Kubernetes clusters, either on-premises or in the cloud.
Lighthouse provides DNS discovery to Kubernetes clusters connected by Submariner in multi-cluster environments.
This tool automates Cisco Catalyst SD-WAN lab deployment inside Cisco Modeling Labs (CML).
vTunnel is a tool that proxies IP traffic between guest and host networks by using the VSOCK protocol.
This project provides the ability to tunnel IP traffic through the hypervisor so that connections can be proxied into or out of virtual machines.
Related contents:
Mercator is a Web application for managing the mapping of an information system as described in the Mapping the Information System Guide from ANSSI.
Mercator's objective is to enable a team to manage the mapping of an information system in a complete and consistent way, and to automatically generate the various reports needed to facilitate the maintenance and communication of this mapping.
Related contents:
- Mapping the information system @ ANSSI.
- Cartographie du système d'information @ ANSSI :fr:.
- Mercator - La cartographie du système d'information @ LinuxFr.org :fr:.
- Episode #513 consacré à Mercator @ NoLimitSecu :fr:.
- Mercator @ Sourcentis.
- Guide de l'ANSSI : Cartographie Du Système D'information by Chistine Dessus @ Calaméo :fr:.
A lightweight, browser-based tool for mapping Ethernet connections. Create switches, patch panels, wall ports, routers, etc. Assign ports, connect them, and visualise how your network is wired.
A cross-platform network monitoring terminal UI tool built with Rust.
RustNet provides real-time visibility into network connections with detailed state information, connection lifecycle management, deep packet inspection, and a terminal user interface.
Related contents:
The ZMap Project is a collection of open source measurement tools for performing large-scale studies of the hosts and services that compose the public Internet.
ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
Related contents:
Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning and allows you to easily use many advanced scanning techniques.
A modern network scanner for GNOME.
A modern libadwaita-based network scanner for GNOME that helps you discover devices on your local network.
Related contents:
A lightweight mac status bar development port monitor.
A lightweight cross-platform status bar app that monitors and manages development processes running on configurable ports. The app provides real-time process detection and allows you to kill individual processes or all processes at once.
Related contents:
Mesh network sidecars for NixOS Services.
meshSidecar provides a flexible way to integrate mesh networking capabilities with NixOS services. It allows services to participate in mesh networks without requiring direct modification of the service itself.
Related contents:
Another Looking-glass Server.
NetMirror is a modern, feature-rich looking-glass server with a beautiful web interface for network diagnostics and performance testing.
Bitcoin-powered WiFi Network. Community-built, Sovereign Wi-Fi Infrastructure
TollGate is the pay-as-you-go internet access on open networks. Streaming Sats for Free(dom) internet Access. Powered by Bitcoin Lightning Ecash.
Related contents:
A scalable overlay networking tool with a focus on performance, simplicity and security.
Nebula is a scalable overlay networking tool with a focus on performance, simplicity and security. It lets you seamlessly connect computers anywhere in the world. Nebula is portable, and runs on Linux, OSX, Windows, iOS, and Android. It can be used to connect a small number of computers, but is also able to connect tens of thousands of computers.
Related contents:
Easy, direct connections that punch through NATs & stay connected as network conditions change.
Dumb pipes are Iroh Connections. The dumbpipe tool is a 200-line wrapper around the iroh rust crate. You can use the iroh Endpoint to create a connection to use as a dumb pipe in your own app.
Cloud native networking and network security.
Calico is a single platform for networking, network security, and observability for any Kubernetes distribution in the cloud, on-premises, or at the edge. Whether you're just starting with Kubernetes or operating at scale, Calico's open source, enterprise, and cloud editions provide the networking, security, and observability you need.
Related contents:
A self-hosted, real-time port monitoring and discovery tool.
By auto-discovering services on your systems, portracker provides a live, accurate map of your network. It helps eliminate manual tracking in spreadsheets and prevents deployment failures caused by port conflicts.
Related contents:
Optimized Node Monitoring for Network Analysis.
SONAR is designed to simplify network configuration audits in critical environments. With a clean interface and a robust architecture, it enables any personnel — even non-technical — to understand and document network flows independently.
Extend Docker with IPv6 NAT, similar to IPv4. This project mimics the way Docker does NAT for IPv4 and applies it to IPv6. Jump to Usage to get started right away.
Docker was not created with IPv6 in mind. It was added later and, while it has come a long way, is still not as usable as one would want. Much discussion is still going on as to how IPv6 should be used in a containerized world; see the various GitHub issues linked below.
Simple wireless router setup for Debian-based devices.
RaspAP is feature-rich wireless router software that just works on many popular Debian-based devices, including the Raspberry Pi. Our custom OS images, Quick installer and Docker container create a known-good default configuration for all current Raspberry Pis with onboard wireless. A fully responsive, mobile-ready interface gives you control over the relevant services and networking options. Advanced DHCP settings, WireGuard and OpenVPN support, SSL certificates, ad blocking, security audits, captive portal integration, themes and multilingual options are included.
a network diagnostic tool.
Trippy combines the functionality of traceroute and ping and is designed to assist with the analysis of networking issues.
DNS Measurement, Troubleshooting and Security Auditing Toolset.
Ever been wondering if your ISP is hijacking your DNS traffic? Ever observed any misbehavior with your DNS responses? Ever been redirected to wrong address and suspected something is wrong with your DNS? Here we have a set of tools to perform basic audits on your DNS requests and responses to make sure your DNS is working as you expect.
Related contents:
🤖 The Modern Port Scanner 🤖
The Modern Port Scanner. Find ports quickly (3 seconds at its fastest). Run scripts through our scripting engine (Python, Lua, Shell supported).
Network Top -- Help you monitor network traffic with bpf.
netop is a terminal command line interface that can customize the
network traffic bpf filter rule 🎯.
Related contents:
Wireshark forDocker containers. See all incoming and outgoing requests in Docker containers with just one command.
Subtrace is Wireshark for your Docker containers. It lets developers see all incoming and outgoing requests in their backend server so that they can resolve production issues faster.
🏎 Nping mean NB Ping, A Ping Tool in Rust with Real-Time Data and Visualizations.
Nping is a Ping tool developed in Rust. It supports concurrent Ping for multiple addresses, visual chart display, real-time data updates, and other features.
Related contents:
Bash script to automate setup of Linux router useful for IoT device traffic analysis and SSL mitm
A Dumb WhoIs.
A simple web application for looking up WHOIS, IP, and ASN information using free APIs. The application automatically detects the type of query and provides formatted results with a clean, modern UI that supports both light and dark modes.
View the HTTP and HTTPS requests made by any linux program by running httptap -- <command>.
WIFI / LAN intruder detector. Check the devices connected and alert you with unknown devices. It also warns of the disconnection of "always connected" devices
Network Analysis Tool.
BruteShark is a Network Forensic Analysis Tool (NFAT) that performs deep processing and inspection of network traffic (mainly PCAP files, but it also capable of directly live capturing from a network interface). It includes: password extracting, building a network map, reconstruct TCP sessions, extract hashes of encrypted passwords and even convert them to a Hashcat format in order to perform an offline Brute Force attack.
Fast and friendly network scanner. the original IP scanner for Windows, Mac and Linux.
Angry IP Scanner (or simply ipscan) is an open-source and cross-platform network scanner designed to be fast and simple to use. It scans IP addresses and ports as well as has many other features.
Related contents:
Online PCAP Analysis and Network Traffic Insights.
Effortless PCAP File Analysis in Your Browser
Explore and analyze PCAP files online using A-Packets, designed to provide comprehensive insights into network protocols like IPv4/IPv6, HTTP, Telnet, FTP, DNS, SSDP, and WPA2. This tool allows users to easily view details of network communications and dissect layers of data transmission.
Graphical Management for Kea DHCP.
Stork is an open source ISC project providing a monitoring application and dashboard for ISC Kea DHCP and (eventually) ISC BIND 9. A limited configuration management for Kea is available and is expected to grow substantially in the near future.
Stork provides a web-based graphical interface for monitoring, troubleshooting, and maintaining the configuration of, Kea DHCP servers. Stork provides a single point for administrative control for your Kea servers, including integration with LDAP for administrator authentication and authorization. The graphical interface makes it possible for network administrators to easily make configuration updates to the DHCP service without having to struggle with unfamiliar CLI.
Related contents:
SmokePing is a deluxe latency measurement tool. It can measure, store and display latency, latency distribution and packet loss. SmokePing uses RRDtool to maintain a longterm data-store and to draw pretty graphs, giving up to the minute information on the state of each network connection.
A simple wrapper over nmcli using wifiscanner made in rust.
A Turn-key Suricata-based Network Detection and Response System. SELKS is now Clear NDR - Community
As the next generation open source turnkey Suricata implementation from Stamus Networks, the Clear NDR - Community edition is the successor to SELKS. We incorporated many lessons learned from the 10 years of SELKS innovation and user feedback into this platform.