Northern Mike
Posts: 43
Joined: Mon Oct 31, 2016 11:41 am

Network analyzer apps/distributions?

Mon Jan 30, 2017 1:22 am

Are there any good apps beyond wireshark and nmap for network analyzing?
Even interested in distros.

I tried Kali and found the image already needing effort to fix (will play with when I have time).
Tried NetPi on both the rpi 3 and the rpi zero with no luck booting.

The key items I need is quick discovery (network IP with/without DHCP on network) and device locate/ID (specifically IP cameras).

mfa298
Posts: 1387
Joined: Tue Apr 22, 2014 11:18 am

Re: Network analyzer apps/distributions?

Mon Jan 30, 2017 10:55 am

Northern Mike wrote:Are there any good apps beyond wireshark and nmap for network analyzing?
...
The key items I need is quick discovery (network IP with/without DHCP on network) and device locate/ID (specifically IP cameras).
For finding devices on the network arpwatch can be useful, it keeps a database of what it's seen and can notify of new devices or when things change.

ntop can give stats based on traffic seen by the device (either needs to run on the router or have a port SPAN/mirror to see traffic)

for traffic load on a server iptraf-ng gives some useful information.

Other things to consider (if your switches / routers allow) is collecting of arp/forwarding tables via snmp, arp should be fairly standard between devices, forwarding tables you might need to go hunting mibs. If you've got managed switches you might also be able to look at netflow / sFlow for detailed traffic flow stats.

For location information LLDP might help, if switches and devices support it they can at least tell each other what's on the other end of the cable (older devices might use cdp or other propriety protocols for similar information).

Return to “Advanced users”