Sunday, January 1, 2012

Distributed resource monitor

jmon

jmon - distributed resource monitor

Resource monitoring for large networks. The jMon system allows for the real time monitoring of CPU, memory and swap usage. The system makes use of a small daemon running on each of the machines that are to be monitored. 

The client makes a TCP/IP connection with each of the servers specified in the configuration file. The statistics of all the host machines are displayed in an ncurses window on the console. 

Install jmon in Debian
#apt-get install jmon

Audit your remote systems from this host


harden-remoteaudit

harden-remoteaudit - Audit your remote systems from this host

This package helps you to install a set of tools to check remote systems, sniff for passwords and more. Observe that this kind of activity can be illegal so you have to check if you are authorized to do so in the environment where you install this package.

You can check exploits, sniff for passwords and similar things.

Nessus note: You have to have the nessus client installed on some host. The client is provided by the 'nessus' package. You can install it on the same host but that is not necessary.

NOTE! This package includes packages that can damage the system that you audit. It should NOT be used on any host, network or system that you are not responsible for. It can also damage the hosts that are checked. You have been warned!
Install harden-remoteaudit in Debian

#apt-get install harden-remoteaudit

Hardware identification system

hwinfo

hwinfo - Hardware identification system

hwinfo is the hardware detection tool used in SuSE Linux. 

In Debian-Edu (Skolelinux) hwinfo has shown better results than discover when detecting mouse, keyboard and monitor. 

hwinfo is collecting information about the hardware installed on a system. Among others, libhd contains information about cdrom, zip, floppy, disks and partitions, network card,graphics card, monitor, camera, mouse, sound, pppoe, isdn, modem, printer, scanner, bios, cpu, usb, memory and smp.

Install hwinfo in Debian

#apt-get install hwinfo

Multiple stacked system monitors: 1 process [client]

gkrellm

gkrellm - multiple stacked system monitors: 1 process [client]

GKrellM charts CPU, Disk, and all active net interfaces automatically. An on/off button and online timer for the PPP interface is provided. Meters for memory and swap usage as well as a system uptime monitor are provided. Additional features are: 


* Client/server capabilities
* Clicking on left or right frame slides GKrellM shut to gain screen space.
* Autoscaling grid lines with configurable grid line resolution.
* LED indicators for the net interfaces.
* Configurable chart sizes.

Install gkrellm in Debian

#apt-get install gkrellm

Undelete utility for the ext2 file system

e2undel

e2undel - Undelete utility for the ext2 file system

Interactive console tool to recover the data of deleted files on an ext2 file system under Linux. It does not require knowledge about how ext2 file systems works and should be usable by most people. 

This tools searches all inodes marked as deleted on a file system and lists them as sorted by owner and time of deletion. Additionally, it gives you the file size and tries to determine the file type in the way file(1) does. If you did not just delete a whole bunch of files with a 'rm -r *', this information should be helpful to find out which of the deleted files you would like to recover. 

E2undel will not work on ext3 (journaling) filesystems. 

Install e2undel in Debian

#apt-get install e2undel

Versatile resource statistics tool

dstat

dstat - versatile resource statistics tool

Dstat is a versatile replacement for vmstat, iostat and ifstat. Dstat overcomes some of the limitations of these programs and adds some extra features. 

Dstat allows you to view all of your network resources instantly, you can for example, compare disk usage in combination with interrupts from your IDE controller, or compare the network bandwidth numbers directly with the disk throughput (in the same interval). 

Dstat also cleverly gives you the most detailed information in columns and clearly indicates in what magnitude and unit the output is displayed. 

Dstat is also unique in letting you aggregate block device throughput for a certain diskset or network bandwidth for a group of interfaces, i.e. you can see the throughput for all the block devices that make up a single filesystem or storage system. 

Dstat's output, in its current form, is not suited for post-processing by other tools, it's mostly meant for humans to interprete real-time data as easy as possible. 

Install dstat in Debian

#apt-get install dstat


output

-cpu-total- -disk/total -net/total- ---paging-- ---system--
usr sys idl|_read write|_recv _send|__in_ _out_|_int_ _csw_
0 0 100| 0 0 | 0 0 | 0 0 | 0 0
1 1 98| 0 608k| 300B 1994B| 0 0 | 120 49
1 1 98| 0 0 | 420B 1328B| 0 0 | 120 42
0 2 98| 0 0 | 480B 1760B| 0 0 | 121 40
1 1 98| 0 0 | 600B 1760B| 0 0 | 123 44
0 2 98| 0 0 | 480B 1760B| 0 0 | 115 40
2 0 98| 0 0 | 473B 1330B| 0 0 | 113 45
2 0 98| 0 0 | 420B 1326B| 0 0 | 120 42
2 0 98| 0 0 | 480B 1544B| 0 0 | 119 42
0 2 98| 0 0 | 480B 1760B| 0 0 | 120 42
2 0 98| 0 0 | 420B 1546B| 0 0 | 112 44
1 1 98| 0 272k| 360B 1326B| 0 0 | 130 43
0 2 98| 0 8192B| 660B 1652B| 0 0 | 141 46
1 1 98| 0 0 | 420B 1544B| 0 0 | 121 40
2 0 98| 0 0 | 782B 1760B| 0 0 | 126 44
1 1 98| 0 0 | 480B 1760B| 0 0 | 120 40
2 0 98| 0 0 | 782B 1760B| 0 0 | 125 45
1 1 98| 0 0 | 646B 1760B| 0 0 | 122 40

Tool for reporting changes in system configuration

diffmon

diffmon - Tool for reporting changes in system configuration.

This tool is run by a nightly cron job, and takes a `diff' of specified system configuration files and emails them to a specified email address. Options to diff can be specified. This is useful in friendly environments where there are multiple sysadmins working on configuration files/setups and everyone's changes are reported. CVS is a better answer, but most of us don't want to have the hassle of putting system files in a repository. 

Install diffmon in Debian
#apt-get install diffmon