Table of Contents
Software
On this page we present some tools we developed in the context of our work at bwNET100G+.
Alekto – Zero Trust Network Framework
CPUnetLOG
CPUnetLOG is an open source software that can:
- Display
- Log
- Plot
CPU utilization and network throughput.
The software is developed at the Institute of Telematics of the Karlsruhe Institute of Technology and has a strong focus on scientific reasearch, presentation and publication. It is available under the “BSD 2-Clause License” and is open for contributions.
If you have any questions about the software or if you're interested to contribute to the project, feel free to contact Mario Hock.
Getting the code via git:
https://git.scc.kit.edu/groups/CPUnetLOG
git clone https://git.scc.kit.edu/CPUnetLOG/CPUnetLOG.git git clone https://git.scc.kit.edu/CPUnetLOG/CPUnetPLOT.git
(The first repository holds the live display and logging tool. The plotting tool can be found in the second repository.)
TCPlog
TCPlog is an open source software that can display, log and live plot miscellaneous TCP socket internals.
TCPlog uses either Linux's “tcp_probe”-Kernel module or data provided by TCPinfo as it's input source. Data of filtered flows can be logged to stdout, into a file or send via socket. TCPlivePLOT uses TCPlog's logging output to visualize live these data.
Getting the code via GIT:
Getting the programs via PyPi:
pip3 install --user tcplog pip3 install --user tcpliveplot
Anonymize IPs
Download: anonymize-ips.pl
USAGE: ./anonymize-ips.pl -i <file> [-o <file>] [--hash|--subnet] This script can be used to replace IP addresses in any input textfile by static string values or hashes of the addresses. In the current version the script expects the IP addresses the be placed between double qotes ("). Options: -i defines the input file including the IP addresses you want to anonymize. -o defines an optional output filename, where the anonymized output will be written to. By default the output will be written to anonymized.txt. --hash IP addresses will be hashed with sha512_base instead of being replaced by a static string value. --subnet the last byte of an address (v4) or the interface identifier (v6) will be replaced with XX.