Do you have any recommendations for a self hosted network analyzer that can visualize all the device connected to a network, different subnets, etc, and perhaps show the flow of data for each network device?
I’m probably asking for too much but sometimes there are cool projects out there that aren’t easy to find.

  • irmadlad@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 hours ago

    I’ll probably get boo’d but NetData covers just about everything I could want to monitor, and then some. If you don’t want to hook up to the mother ship, you can use the /v3 switch in the url on your homarr dash, or equal like:

    https://netdata.mycoolserver.duckdns.org/v3

    Also, as has been mentioned, ntopng is pretty awesome as well.

    • SayCyberOnceMore@feddit.uk
      link
      fedilink
      English
      arrow-up
      5
      ·
      7 hours ago

      +1 for this.

      You need to see all the data flowing through a sensor to be able to map it, so a router / firewall is often the central point.

      I run it as an addon for pfSense and it’ll show me all sorts of info.

      If you setup the GeoIP you can see which countries your network’s connecting too… interesting for torrents…

      • Appoxo@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        1
        ·
        5 hours ago

        What are your country hotspots for what kind of content? (e.g. if you primarily aquire movies, shows, anime, linux isos, misc.)

        • SayCyberOnceMore@feddit.uk
          link
          fedilink
          English
          arrow-up
          2
          ·
          4 hours ago

          It varies of course, but most of my torrents are movies and linux ISOs (for real)

          I seed any Movies I leech at a 2:1 ratio… most are leeched from Europe, but I’ve had them from Canada, South America, Asia, but weirdly not many from North America.

          I like to give back more to the Linux community, so I’m constantly seeding Arch & Mint ISOs (as that’s just what I’m using… maybe something Raspberry-ish) - they go everywhere.

          I had a weird instance once where the same Chinese IP address was constantly re-downloading the same ISO. Could’ve been a VPN endpoint, but after I’d shared something like 40:1 there, I started using GeoIP to block it and similar regions I was uncomfortable with… so the world’s becoming smaller for me.

          • Appoxo@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            1
            ·
            3 hours ago

            I see some US connections on my end but usually the South America, Europe and some lesser known countries around the world (Primarily private trackers with a healthy mix of movies and anime and rarely tv shows).
            China comes up often for me.

    • JasonDJ@lemmy.zip
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      8 hours ago

      Netbox is a documentation tool. You can plug in Napalm to do some stuff but it mostly exists to catalog the intended state of the network.

      It’s a wonderfully powerful tool, and Stretch has done a great job with it…but it’s not an analysis tool, it’s documentation.

      Stretch is a pretty cool guy too. He strikes me as the kind of person that really wants to help colleagues “see the light” of the role Python and FOSS can play in network automation and maintenance. I respect that, a lot…finding enjoyment in the way you do things, and wanting to share that with other people.

  • catloaf@lemm.ee
    link
    fedilink
    English
    arrow-up
    5
    ·
    11 hours ago

    This really depends on your network hardware. At a minimum it’ll need to support snmp and you can build something in zabbix, or preferably it’ll support netflow.

    • sugar_in_your_tea@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      ·
      8 hours ago

      Depending on how you intend to use Kali, that’s either a bad idea or a terrible idea. Don’t use Kali bo for long running processes.

      Just get a router with that feature or flash a firmware with that feature.