Internet Storm Center reached out to its community for suggestions on free and almost-free tools for network management. Free, in our experience, does not necessarily mean lacking in features or utility as compared to the big commercial software offerings (we will have a roundup on those tools in a future post). Users recommended the following:
- Secunia PSI for patch status and app versions (apparently the ‘P’ version is only for personal use).
- RANCID for network device config changes.
- Nagios for device availability
- NMAP for port scanning.
- Nessus for vulnerability scanning.
- Ngrep for network forensics.
- Syslog-NG for log aggregation.
- tcpdump for traffic analysis.
- IPTABLES for firewalling.
- Snort for IDS.
- Zabbix for availability monitoring.
- Spiceworks for general system monitoring.
- Cacti for network activity collection and graphing.
- ZenOSS for network discovery and monitoring.
- Bactrack4 for penetration testing and forensics.
- Smokeping for network latency monitoring.
- OSSEC HIDS for log analysis and other realtime malware detection.
- Ganglia for performance stats.
- SNARE for routing windows events to a syslog server.
- xymon for availability monitoring and everything you used to like about Big Brother.
Additional suggestions are more than welcome in the comments.





