A reliable network monitoring and management solution must accurately detect network devices such as routers, servers, and client workstations. It must be able to display a map of the whole network, monitor the health and performance of each device, and have a way to notify someone of a problem by email, text message, or other form of communication. It should be able to fix a problem by restarting services or running specific programs. It should generate detailed reports that you can analyze easily to help prevent future incidents. Finally, a decent monitoring system must be easy to use, deploy, and customize according to your monitoring needs. Let's use these standards to see if GroundWork Monitor Community Edition is up to the task.
Maintaining filesystems can be a real administration burden. Over time you might start getting multiple copies of the same file, soft links that point to files that no longer exist, temporary files that have been hanging around longer than they should, and binaries that have been installed and not had their debugging information stripped out. fslint can help you find these troublesome files so you can clean up your filesystem.
pfSense is a free, powerful firewall and routing application that allows you to expand your network without compromising its security. Started in 2004 as a child project of m0n0wall -- a security project that focuses on embedded systems -- pfSense has had more than 1 million downloads and is used to protect networks of all sizes, from home offices to large enterprises. pfSense has an active development community, and more features are being added in each release to further improve its flexibility, scalability, and, of course, security.
No Linux distribution can bundle every package that users might want, so most distros host software repositories from which users can download and install additional applications. Since 2006 Slackbuilds.org has served as a high-quality repository for Slackware users, but using it requires several steps and switching between a Web browser and a virtual terminal. Sbopkg is a new ncurses-based utility that helps users build packages from SlackBuilds.org and seamlessly integrates the repository with the operating system.
The Uncomplicated Firewall (UFW) is a new tool from Ubuntu whose goal is to make configuration of the built-in Linux packet filter less complicated and more secure for novice users.
Devil-Linux might sound hellish for a Linux distribution, but this live CD offers many blessings for your server needs. Originally developed as a router/firewall distribution, Devil-Linux has expanded its functionality to include nearly every service that a server might offer. It can function as an LDAP server, a VPN server, an email or file server, and more.
You can monitor your computers in a wide variety of ways. Large proprietary applications make sense for large installations that can afford the expense of both the software and consultants who fine-tune the systems. Open source monitoring solutions like Nagios or OpenNMS cost nothing to acquire but still require planning and tweaking. When you need to address smaller problems with process data on a system, the process monitoring tool ps-watcher comes in handy.
Network access control (NAC) aims to unify endpoint security, system authentication, and security enforcement in a more intelligent network access solution than simple firewalls. NAC ensures that every workstation accessing the network conforms to a security policy and can take remedial actions on workstations if necessary. For example, NACs can check if a workstation has antivirus software installed and, if not, NAC will limit the workstation's access to the network. In some cases, if NAC is capable of remedial measures, it can force-install an antivirus program on the workstation so that it will conform to the security policy. Although NAC can improve the security of your environment, most commercial NACs cost several thousand dollars. However, using NAC does not need to be that expensive. PacketFence, a free open source NAC application, gives you the security of NAC for free.
Umit is a user-friendly graphical interface to Nmap that lets you perform network port scanning. The utility's most useful features are its stored scan profiles and the ability to search and compare saved network scans. A profile lets you configure how a network scan is performed, change the source information for the scan, and explicitly nominate hosts to include or exclude from the scan, as well as various more advanced options.
Thin clients reduce hardware costs, offer added security by stripping away storage options, and ease management tasks by storing all configurations on a centralized server. Citrix provides a good solution and is a dominant player in this arena with Citrix Presentation server, but that comes at a price -- about $1,000 for five concurrent connections and about $200 to $300 for each additional concurrent client connection. However, taking the thin client route does not have to be that expensive: openThinClient is an open source thin client server that is absolutely free.
shd-tcp-tools provides a collection of tools for port forwarding, load balancing, and rate-limiting TCP connections. They can be useful if you want to offer SSH services but also limit how much of your bandwidth each user can consume, so that a single long-running SCP operation cannot starve the link from your server to the Internet.
Things go wrong. Hard disks fail and whole servers crash. Luckily, many Linux-based distributions are available to help systems administrators handle minor catastrophes. We looked at four of the most portable, all of which fit on a 210MB mini CD -- SliTaz, Parted Magic, GParted, and RIPLinuX.
If you've ever looked in your /etc/fstab file, you have may have seen an entry that looks like UUID=62fa5eac-3df4-448d-a576-916dd5b432f2 instead of a more familiar disk drive designation, such as /dev/hda1. Such entries are called universally unique identifiers (UUID). You can use these 128-bit numbers to make hard disk management easier.
Live CDs let you boot an operating system without installing any software on a hard drive. There are plenty of Linux live CDs and lots of tools to customize them. The Ubuntu Customization Kit, tastefully called UCK, lets you add your favorite applications into the distro. If you're not happy with the factory-installed Ubuntu apps, here's your chance to spin up your very own Ubuntu live CD without too much effort.
The Linux kernel is flexible, and you can even modify the way it works on the fly by dynamically changing some of its parameters, thanks to the sysctl command. Sysctl provides an interface that allows you to examine and change several hundred kernel parameters in Linux or BSD. Changes take effect immediately, and there's even a way to make them persist after a reboot. By using sysctl judiciously, you can optimize your box without having to recompile your kernel, and get the results immediately.
The latency of the execution of a particular task can be affected by what tasks a system is running, the condition of the network the machine is connected to, and how well the various server machines on the network are performing. LatencyTOP is a command-line tool and kernel patch that lets you see what is causing latency in the applications on your system.
phpLogCon provides a user-friendly Web interface to your system logs. It can handle logs from both Linux and Windows systems, so an administrator can log in to a single phpLogCon site to see what is happening on all the machines on a network.
Finnix is a live CD distribution designed to assist system administrators in such tasks as system recovery and network monitoring. Based on Debian testing and Linux kernel 2.6, Finnix helps with filesystem and partition manipulation as well as with data recovery, installation of other operating systems, and boot record repair.
The PSMon utility lets you specify which processes should be running, how much of resources such as CPU or RAM each is allowed to use when it runs, and how many instances are able to be run. PSMon will then ensure that these processes are running and kill off a process if it starts to use too many resources, and possibly restart a process if it has crashed.
If you've ever worked with and manipulated MySQL databases, chances are you've used phpMyAdmin to manage your databases from a Web interface. But phpMyAdmin can be a little complex; if you want a lightweight alternative, try phpMinAdmin. It's easier to install than its more robust cousin and has an easy-to-navigate graphical user interface for most important MySQL functions.