[[Interface::daemon]]

Alarm Pinger: Alarm Pinger (apinger) is a little tool which monitors various IP devices by simple ICMP echo requests. Unlike most Perl or shell script tools, it does not spawn processes or use much CPU time, and is ideal for when one wants continuous monitoring and fast response upon target failure. It supports both IPv4 and IPv6. Alarm Pinger is configurable via $sysconfdir/apinger.conf file. The configuration file contains definitions for alarms, targets and various parameters. It does need root privileges to start (to create raw sockets), but will drop them before sending or receiving any packets.

Alist: Alist is a program that collects hardware and software information about systems and stores it in a database for users to browse and search via a Web interface. The program consists of three parts: a client portion that collects the information, a daemon that receives data sent from clients, and a CGI that displays and lets you search for information.

Alive: Alive is a package that provides a command-line program to periodically make network contact with (aka “ping”) a specified host. Originally known as qADSL, it was also created to automate the annoying login process of several Swedish ISP's, e.g., Telia ADSL, COMHEM and Tiscali. After several years of inactivity, it was rewriten from scratch in 2012 by Thien-Thi Nguyen, leaving only the periodic ping.

Alsaplayer: AlsaPlayer is a PCM player written with the ALSA sound system in mind. It also includes support for JACK, OSS, NAS, and ESD. It makes extensive use of multi-threading and supports OGG, MP3, WAV, CDDA (CD Digital Audio), MOD, S3M, IT, and many other input types. Features include a real- time effects stream, variable speed/pitch control, multiple active visual scopes, command line mode, playlists, plugin architecture, low-latency mode, and more.

AlterMIME: 'alterMIME' is an integrated email/mailpack manipulation utility. It adds and modifies headers, adds disclaimers, and changes or removes embedded attachments based on filename or (for removals) content type.

Am-utils: The Berkeley Automounter, Amd, maintains a cache of mounted file systems, and lets users dynamically control which file system to mount with selectors. Selectors, which may be combined, allow decisions of the form "hostname is this," or "architecture is not that." Amd also supports numerous file system types, including NFS, UFS and the novel program file system. The combination of selectors and multiple file system types means that identical configuration files can be used on all machines. Amd will not hang if a remote server goes down, and can determine when a remote server has become inaccessible and mount replacement file systems when they become available.

Amavisd-new: 'amavisd-new' is an interface between MTAs and content checkers, including virus scanners, and/or the Mail::SpamAssasin Perl module. It talks to the MTA via (E)SMTP or LMTP, or by using helper programs. No timing gaps exist in the design, which could cause a mail loss. It is normally positioned at or near a central mailer, not necessarily where the user's mailboxes and final delivery takes place.

AmphetaDesk: AmphetaDesk downloads syndication news and information and displays it on a fully customizable Web page.

And-httpd: And-httpd is an HTTP server that maps URLs to files. In other words, in can take an incoming URL and map it to a file in a number of ways (for example, according to content type or language). It can also do authentication or IP based ACLs. It cannot do CGI or other kinds of code execution. It cannot even dynamically create directory listings (although it comes with external tools to do so automatically, and to create a "status page"). It currently has a $2000 "security guarantee" against remote attacks.

Andesaurux: Simple OS that has a nanokernel(just unistd.h and unistd.c) and some useful programs(including listis)

Antidote: Antidote is an free software implementation of the IEEE 11073-20601 standard. It also contains the implementation of a D-Bus based 11073 manager service.

Anubis: Anubis is an SMTP message submission daemon. It represents an intermediate layer between mail user agent (MUA) and mail transport agent (MTA), receiving messages from the MUA, applying to them a set of predefined changes and finally inserting modified messages into an MTA routing network. The set of changes applied to a message is configurable on a system-wide and per-user basis. The built-in configuration language used for defining sets of changes allows for considerable flexibility and is easily extensible. GNU Anubis can edit outgoing mail headers, encrypt and/or sign mail with the GNU Privacy Guard, build secure SMTP tunnels (Simple Mail Transport Protocol) using the TLS/SSL encryption even if your mail user agent doesn't support it, or tunnel a connection through a SOCKS proxy server.

Apf: 'apf' (active port forwarder) uses SSL for secure packet tunneling. It is meant for users without an external IP who want to make some services available on the Internet. afserver is placed on the machine with a publicly accessible address. afclient is then placed on the machine behind a firewall or masquerade, which makes the second machine visible to the Internet. You do not need root privileges to run afserver, nor does it use other processes. It uses 'zlib' to compress the transferred data.

Apt-torrent: 'apt-torrent' contains an apt to the BitTorrent gateway. It lets you fetch packages through the BitTorrent protocol

Arpalert: 'arpalert' listens on a network interface, catches all conversations of MAC address to IP request, and compares the MAc addresses it detected with a pre-configured list of authorized addresses. If the address is not on this list, arpalert launches an alert script with the MAC address and IP address as parameters. 'arpalert' can run in daemon mode and is very fast (low CPU and memory consumption). It responds at signal SIGHUP (configuration reload) and at signals SIGTERM, SIGINT, SIGQUIT and SIGABRT (Kwhere it stops itself).

Asterisk-oh323: 'asterisk-oh323' adds H.323 support to the ASTERISK soft PBX by interfacing the OpenH323 library to ASTERISK through a loadable module. The package provides the channel driver as well as a wrapper in a shared library form. It can initiate and receive calls to and from H.323 endpoints, and has been successfully tested with the H.323 terminals (ohphone, openphone) on the OpenH323 site.

AstroCam: AstroCam is an C-based Stepmotor Control system that includes a PHP Web interface. You can use it for controlling webcams over the Internet/intranet or for anything else you might want to do with a stepmotor.

Aub: 'aub' downloads articles from newsgroups and decode them automatically. It is simple, well documented, and easy to use and configure. It handles multi-part postings, and both uuencoded and base64 encodings.

Aumonet: Detects network and SSH server availability, mounts registered accesses and maintains them mounted accross network changes and interruptions.

Auto nice daemon: The auto nice daemon (AND) periodically activates itself and renices jobs according to priority and CPU usage. Jobs owned by root are left alone. Jobs are never increased in their priority. The renice intervals, the default nice level, and the activation intervals can all be adjusted. A priority database stores user/group/job tuples along with their renice values for three CPU usage time ranges. Negative nice levels are interpreted as signals to be sent to a process, triggered by CPU usage; in this way, browser sessions running amok can be killed automatically. The strategy for searching the priority database can be configured.

Autorun: 'autorun' automagically recognizes all available CDROMs in the system, mounts them upon insertion of a media and executes a possible autorun executable on the CD. The user can remove the media; autorun will call unmount after that.

Autossh: Autossh is a program to monitor and automatically reestablish SSH connections. It is similar to rstunnel (Reliable SSH Tunnel), but is easier to set up and use, especially for connections to multiple hosts. The program monitors connections by using a loop of port forwardings, and will back off on the rate of connection attempts when experiencing rapid failures (such as connection refused).

Autothrottle: 'Autothrottle' is a daemon that throttles your CPU according to the system load. It can be used with both ACPI and CPUfreq throttling. You can also specify different profiles for battery and AC power. When the daemon receives SIGHUP, it checks for AC power and alters the profile. This can be used e.g. from acpid when receiving AC events.

AweMUD: AweMUD is a MUD (Multi User Dungeon) server intended for highly interactive and depth-filled game worlds. Clean interface design and usability are also primary goals of the AweMUD project. AweMUD features an integrated scripting language, Scriptix, for defining world behaviour and extending the MUD engine. Parts of the engine which aren't alrea\dy written in Scriptix have hooks for over-riding their behaviour with scripts, an\d the source is readily modifiable for any other needs.

BFilter: BFilter is a smart filtering HTTP proxy. It removes ads, webbugs, and popups. Unlike the majority of similar tools, it doesn't rely on a list of blocked URLs, but instead parses HTML on the fly, and detects ads using a set of heuristic rules. BFilter has a built-in JavaScript engine which detects popups and js-generated ads.

Backuppc: BackupPC is a high-performance, enterprise-grade system for backing up GNU/Linux machines and laptops to a server's disk. Its features include clever pooling of identical files, no client-side software, optional compression for using even less storage, support for a full set of restore options, and a powerful Apache/CGI user interface.

Bandwidthd: 'bandwidthd' tracks usage of TCP/IP network subnets and builds HTML files with graphs to display network utilization. Charts are built by individual IP. It color codes HTTP, TCP, UDP, ICMP, VPN, and P2P traffic. Unlike MRTG, it tracks each individual IP address, not the status of any particular link.

Batemail: 'batemail' is a script that goes between your MTA (e.g. Sendmail) and your local mailer (e.g. Procmail) to strip potentially nasty attachments from email messages. It takes input on STDIN, removes executable MIME attachments, and gives the result to the local mailer. Taboo attachments are those whose filename ends in one of several "blacklisted" extensions (EXE, VBS, etc.).

Bayonne: Bayonne is the telephony server of the GNU project. Based on the ACS project, it offers a multi-line interactive voice response telephony server which may be scripted and telephony plug-ins for runtime driver configuration directly extended thru modular plugins. Bayonne also features "TGI" for making Perl applications "telephony aware". Support has been extended to include XML parsing and support has been started on VoIP integration to support next generation telephone networks. The project is not fully completed but is moving steadily towards producing a finished project that may be used to build telephony based system administration, home automation, automated attendant, v-commerce, and voice messaging systems.

Bcfg2: Bcfg2 allows you to describe and deploy complex configurations across pools of GNU/Linux and Unix systems, leading to a consistent, reproducible, and verifiable description of your environment. Bcfg2's visualization and reporting tools aid in your day-to-day administrative tasks. Its unique analysis features help you cope with the ever-increasing complexity of your networks.

Biferno: Biferno is a new object-oriented, HTML embedded, scripting language for web development. Its high-level built-in classes, with their methods and properties, make the code very clean and easy to mantain. It has a plug-in architecture that makes the language completely extensible, allowing other developer to easily add functionality through internal and external classes.

Binkd: Binkd is a Fidonet mailer designed to operate via TCP/IP networks. As a FTN-compatible internet daemon, it makes possible efficient utilization of TCP/IP protocol suite as a transport layer in FTN-based (Fido Technology Network) networks.

Bitcoin-Qt: Bitcoin-Qt is a multiplatform bitcoin client and wallet. Bitcoin is a network and a currency establishing a PKI for electronic cash transactions which is distributed P2P. To quote the developers, "Bitcoin is a decentralized P2P electronic cash system without a central server or trusted parties. Users hold the crypto keys to their own money and transact directly with each other, with the help of the network to check for double-spending."

Bitflu: Bitfu is a BitTorrent client designed to run non-stop as a daemon. It does not provide a graphical interface, but offers a telnet interface and can handle multiple torrent downloads.

Bitwarden-ruby: bitwarden-ruby is a server application for storing credentials, especially web-based login details. It includes an independent API reference. Compatible browser plugins can retrieve and fill in login credentials based on the current URL. bitwarden-ruby is a replacement for bitwarden-core, a freely licensed server application with a non-free dependency (the SQL Server database).

BoPHP: BoPHP is a Web interface for Boss Ogg. It plays Ogg Vorbis, MP3, and Flac files, and transparently uses SQLite as a database backend. Its artist/album/song scheme is particularly useful for large collections. It has a powerful import system based on filename and/or tags, and uses libao for output. The package currently supports OSS, Alsa, esd, arts, and others. Clients communicate via a powerful XML-RPC interface. Queue size is unlimited, and users can select what happens to the queue when it's empty or finished.

Bobot++: 'bobot++' is an IRC bot written in C++. Being the evolution of bobot, it provides time dependent commands, is multichannel, and has flood control, output priority control, and many other features. There are four user levels and three different protections. You cannot get operator privileges by spoofing the bot, and there is no backdoor.

Bogofilter: Bogofilter is a Bayesian spam filter. It takes an email message or other text on standard input, does a statistical check against lists of "good" and "bad" words, and returns a status code indicating whether or not the message is spam. It is designed with fast algorithms (including Berkeley DB system), and tuned for speed, so it can be used for production by sites that process a lot of mail.

Boodler: 'Boodler' lets you create or edit continuous streams of sound called 'soundscapes.' Each soundscape is a small piece of Python code -- typically less than a page. A soundscape can incorporate other soundscapes; it can combine other soundscapes, switch between them, fade them in and out. This package comes with many example soundscapes. You can use these, modify them, combine them to arbitrary levels of complexity, or write your own.

Breeze: 'breeze' aims to be a fast and powerful CD Digital-Audio Player. It may run as either a console app or as a daemon. It can control a cdrom that is playing live, can change track to the next or previous one, jcan jump backward or forward, and set a playlist and your information about cdda.

Brltty: BRLTTY is a daemon which provides access to the GNU/Linux console (text mode) for a blind person using a soft braille display. It drives the braille terminal and provides complete screen review functionality. The web site has a complete list of braille display models that are supported. Features include blinking cursor and capital letters, screen freezing for leisurely review, attribute displays and attribute underlining to locate highlighted text, hypertext links, intelligent cursor routing for easy cursor movement without moving your hands from the braille display, a cut and paste function, on-line help, and a modular design that lets you add drivers relatively easily.

Browser-history: An X daemon maintaining a browser-independent global history of visited sites.

Bubblegum: Bubblegum is a daemon which watches a files access, modification and inode change times and MD5 checksums, and logs and/or executes a command (with file information expansions) when detecting a change

BuildBot: Automates the compile/test cycle required by most software projects to validate code changes. It builds and tests the tree each time a change is committed, providing status updates through a Web page or other protocols.

BulkWatch: 'BulkWatch' monitors sendmail's logs and takes specified action when an IP has exceeded your configured maximum settings. You can specify that users may send X messages in X number of seconds. Email in excess of that triggers an action; it will display an alert to the screen in foreground mode; log an alert to syslog; email an alert to a predefined email address; or run an external command with the IP and number of messages as arguments.

Bustd

* Features

Insignificant memory usage!

bustd seems to use less memory than some other lean daemons such as earlyoom.

Also quite insignificant CPU usage

Much like earlyoom and nohang, bustd uses adaptive sleep times during its memory polling. Unlike these two, however, bustd does not read from /proc/meminfo, instead opting for the sysinfo syscall. This approach has its up- and downsides. The amount of free RAM that sysinfo reads does not account for cached memory, while MemAvailable in /proc/meminfo does. The sysinfo syscall is one order of magnitude faster, at least according to this kernel patch: https://sourceware.org/legacy-ml/libc-alpha/2015-08/msg00512.html (granted, from 2015). As bustd can't solely rely on the free RAM readings of sysinfo, we check for memory stress through Pressure Stall Information.

bustd locks all pages mapped into its address space

Much like earlyoom, bustd uses mlockall to avoid being sent to swap, which allows the daemon to remain responsive even when the system memory is under heavy load and susceptible to thrashing.

Checks for Pressure Stall Information

The Linux kernel, since version 4.20 (and built with CONFIG_PSI=y), presents canonical new pressure metrics for memory, CPU, and IO. In the words of Facebook Incubator:

PSI stats are like barometers that provide fair warning of impending resource

shortages, enabling you to take more proactive, granular, and nuanced steps

when resources start becoming scarce.

More specifically, bustd checks for how long, in microseconds, processes have stalled in the last 10 seconds. By default, bustd will kill a process when processes have stalled for 25 microseconds in the last ten seconds.

C-nocem: This is a program for the easy and efficient applcation of the NoCeM protocol on the news spool. Which means, articles for which a NoCeM with 'action=hide" is accepted, will be deleted from your news system as if they had been cancelled. Unlike the standard implementation of NoCeM, this version is optimized for the most common case of 'spam cancels," In fact, it cn do nothing else.

CDfs: 'CDfs' is a file system that 'exports' all tracks and boot images on a CD as normal files. These files can then be mounted (e.g. for ISO and boot images), copied, played (audio tracks), etc. Its main goal is to 'unlock' information in old ISO sessions. The file system also lets you access data on faulty multi session disks, e.g. disks with multiple single sessions instead of a multi session.

CIA: CIA is a “version control informant” that relays commit notifications to IRC channels. The service running the CIA codebase is down since 2011, and the project no longer maintained. It provided real-time VCS commit notifications on various IRC networks. There were CIA hooks for subversion, git, bzr, etc, so a project just had to install such a hook into their repository and register on the CIA website.

CRM114: 'CRM114' is a Controllable Regex Mutilator and Smart Filter, designed for easy creation of filters for things like incoming email redirection, spam filtering, system logs, or monitoring processes. Filtering rules can be either hard-coded (such as regexes), soft-coded (calculated at runtime or read from an external file or process), or learned dynamically by phrase matching (by SBPH hashing). This makes it possible to create very accurate filters over (99.9%) with very little actual work.

CTC: CTC (Cut The Crap) is a proxy-like daemon that will filter your browser's requests to prevent downloading ads. It is meant mostly for dialup users whose bandwidth is too precious and expensive to waste on banners and ads.

CaSchd: a Ruby network manager.

Cajo: The framework allows Java objects to communicate transparently with each other over the network, without absolutely zero source impact. It similarly allows the transparent distribution of remote graphical user interfaces.

CamE: This is a candidate for deletion: URLs both return 404. linuxbrit.co.uk does exist but no mention of CamE on that site. Drw (talk) 09:03, 18 July 2018 (EDT) 'camE' is a Webcam grabber for video4linux devices. It is based on the xawtv webcam app, but extended to use imlib2 for applying antialised, blended truetype fonts to the image before upload. A large number of new options have been added including scp support (in addition to ftp), image archiving, and much more. It runs as a daemon and needs no X connection to operate.

Camsource: Camsource is a modularized and multithreaded daemon for grabbing image frames from a video4linux device. It uses a simple yet powerful plugin system, which allows it to use the same grabbed images for multiple purposes at the same time. It features image filter plugins, which can be daisychained in the XML config file to modify the image before passing them to other plugins. Included plugins provide compatibility with camserv (multipart jpeg streams) and webcam_server, a local snapshot file writing module, and an FTP upload module, as well as basic image filtering (resizing, flipping, and rotating).

Cats2procmailrc: cats2procmailrc is a filter to generate a .procmailrc file from a much terser file consisting of single-line rules. These suffice to do the most common mail filing, making maintenance of a procmailrc very easy for someone with more than a few filing rules. Each rule basically names the folder, an optional subject tag, and the pattern.

Changedfiles: 'changedfiles' is a framework for filesystem replication, security monitoring, and/or automatic file transformations--anything where you'd poll files or directories and then do something to them or send them somewhere else (or both). The difference is, the kernel tells you when they change, instead of you having to poll. It is also an easy real time FTP push mirror to one or multiple sites. 'changedfiles' has a kernel module (works with Linux kernel version 2.4) which reports to a device whenever a file on the filesystem changes, and a daemon which runs in user space and can be configured to do almost anything when a change to a file matching one of the patterns it looks for is reported.

Chaosircd: 'chaosircd' is an IRC daemon with commands, channel modes, user modes, and flood control implemented as runtime (re)loadable modules. DNS and AUTH (ident) queries are done in a single child process so as to not waste valuable file descriptors and responsiveness. It also features a server-server protocol using timestamps for netsplit handling similar to TS5 (hybrid), and OpenSSL encrypted server-server and client-server connections.

Checkpassword-pam: 'checkpassword-pam' is an implementation of a PAM- based checkpassword-compatible authentication program, but is more modern and administrator-friendly.

Chroot safe: 'chroot_safe' is a alternative method for chrooting dynamically linked applications. It delays the chrooting until after dynamic linking has completed, so you don't need to have a copy of the binary or libraries within the chroot. This simplifies the process of chrooting an application, as you often do not need any files besides the data files within the chroot. In addition to chrooting the application, 'chroot_safe' also drops root privileges before letting the application start.

Cmogstored: cmogstored is an alternative implementation of the "mogstored" storage component of MogileFS. cmogstored is implemented in C and does not use Perl at runtime. cmogstored is the only component you need to install on a MogileFS storage node. Read more about MogileFS here: http://mogilefs.org/ cmogstored is not directly affiliated with the MogileFS project nor any commercial interests behind MogileFS.

Collectd: 'collectd' is a small daemon which collects system information every 10 seconds and writes the results in an RRD-file. The statistics gathered include: CPU and memory usage, system load, network latency (ping), network interface traffic, and system temperatures (using lm-sensors), and disk usage. 'collectd' is not a script; it is written in C for performance and portability. It stays in the memory so there is no need to start up a heavy interpreter every time new values should be logged.

Color Mouse: One way to implement color mouse cursors with SDL.

Conc: Conc is a serial console concentrator package. It features remote maintenance of systems over IP, and concurrent connections to consoles. It can pool serial lines on multiple machines into one system, which lets you manage a virtually unlimited number of consoles- ideal for large server farms, clusters or off-site server rooms.

Conflux

Conflux is a data collection and management suite. Conflux can:

help you perform searches which best meet your result needs, across a number of search services
help you retain a list of search results for later use
help share research material among a team or workgroup
help you organize useful searches and search results into groups (bundles)
help you maintain a list of the resources you use most, giving you access to this list from a central location
Conflux allows you to submit searches to be performed, either immediately or later, by the Conflux collector. Once the search has been performed, you will have ready access to the URLs of the results provided by the search engine. Using Conflux, you can manage your past searches, better keeping track of materials you have found useful, aiding you in submitting follow-up searches. Both searches and search results may be bundled together, permitting you to best organize your information how you see fit. Best of all, you may enable your entire team to use Conflux, sharing the benefits of your research. The Conflux suite currently consists of a PHP3 frontend, a MySQL database schema, and a perl 'collector' (which may be run as a daemon, from cron or standalone).

Conntrack-tools: The conntrack-tools are a set of free software userspace tools for Linux that allow system administrators interact with the Connection Tracking System, which is the module that provides stateful packet inspection for iptables. Modern firewalls implement state tracking (a.k.a. connection tracking) in order to keep some state about the currently active sessions. The conntrack-tools are the userspace daemon conntrackd and the command line interface conntrack. The userspace daemon conntrackd can be used to enable high availability of cluster-based stateful firewalls and to collect statistics of the stateful firewall use. conntrack is a userspace command line program targeted at system administrators. It enables them to view and manage the in-kernel connection tracking state table. Since 1.2.0, the conntrack-tools includes the nfct command line utility.

Courier: The Courier mail transfer agent (MTA) is an integrated mail/groupware server based on open commodity protocols such as ESMTP, IMAP, POP3, LDAP, SSL, and HTTP. It provides ESMTP, IMAP, POP3, webmail, and mailing list services within a single, consistent, framework. Individual components can be enabled or disabled at will. Courier now implements basic web-based calendaring and scheduling services integrated in the webmail module. Courier implements SMTP extensions for mailing list management and spam filtering. Courier can function as an intermediate mail relay, relaying mail between an internal LAN and the Internet, or perform final delivery to mailboxes. Courier uses maildirs as its native mail storage format, but it can also deliver mail to legacy mailbox files as well. Courier's configuration is set by plain text files and Perl scripts. Most of Courier's configuration can now be adjusted from a web browser, using Courier's web-based administration module.

Courier-IMAP: Courier-IMAP is a lightweight server that provides IMAP access to maildir mailboxes. It supports folders, custom authentication modules, and virtual mailboxes. A compatible POP3 server is also provided. The source code is based on the IMAP module in the Courier Mail Server, but this build is independently repackaged to work with any other MTA that delivers to maildir format mailboxes.

Cricket: Cricket is a high performance, flexible system for monitoring trends in time-series data. It was developed to help network managers visualize and understand the traffic on their networks, but it can be used for all kinds of other jobs, as well. Cricket has three pieces: the collector, the grapher, and the config tree. The collector runs from cron and fetches data from a number of devices according to the info it finds in the config tree. The grapher is a CGI application that lets users to traverse the config tree from a web browser and see what the collector recorded. The config tree is hierarchical, which avoids duplicate info in the config files.

Cron: Background-only application which launches and runs other applications, or opens documents, at specified dates and times.

Crowdsec: Crowdsec is a firewall and behaviour detection system that uses a shared IP address reputation database in order to identify potential threats. User can instruct Crowdsec to watch certain logs, including both operating system logs and logs for specific applications. These are analysed for potential security threats, and the source IP address of any suspicious activity may be uploaded to a shared reputation database. Likewise, the user can download this shared database to benefit from lists of known suspicious hosts. Crowdsec includes so-called 'bouncers' to block certain IP addresses from accessing services, thus forming a reputation-based firewall. As the bouncer and detection components are separate programs and can remotely communicate, Crowdsec may be appropriate for embedded applications where the host to be protected is not powerful enough to detect potential threats itself; the log analysis can be done on another, more powerful system.

Ctrlproxy: 'ctrlproxy' is an IRC server with multiserver support. It runs as a daemon and connects to a number of IRC servers, then lets you to connect from a workstation and work as the user who is logged in to the IRC server. After you disconnect, it maintains the connection to the server. It acts like any normal IRC server, so you can use any IRC client to connect to it. It supports multiple client connections to one IRC server (under the same nick), so you can connect to IRC using your IRC nick, even if you have an IRC session open somewhere else. It supports logging (in the same format as the irssi IRC client), password authentication, and ctcp (in case no clients are connected).

Current: Current is a server implementation for Red Hat's up2date tools. It's designed for small to medium departments to be able to set up and run their own up2date server, feeding new applications and security patches to workstations/servers. The program is specifically intended for the experienced sysadmin with many machines to deal with.

Cvsauth: cvsauth is a wrapper for the CVS pserver method. It lets you run multiple repositories on one CVS server without the usual risk when running pserver as root (every CVS user can gain root access). It finally removes the security risks with typical CVS pservers. However, be forewarned that Red Hat 5.0 (and older) and SuSe 5.3 (and older) *do not* work.

Cvsd: 'cvsd' is a configurable chroot/suid wrapper for running a CVS pserver more securely. The hope is that cvsd will allow people to run remotely accessible CVS repositories more securely. The distribution includes a script for setting up the chroot'd environment and user/group. It works by running 'cvs pserver' under a special uid/gid ina chroot jail. The authors notes, however, that for authentication the user should consider using SSh as a secure authentication mechanism and transport, because passwords in 'cvs pserver' are transmitted in plain text and 'cvsd' does not change that.

Cvsfs: cvsfs is an attempt to let a user mount a CVS project like any file system. It allows you to navigate and browse through a project tree. No preparations are required on the CVS server It allows to view the versioned files as like they were ordinary files on a disk. There is also a possibility to check in/out some files for editing

Cwdaemon: 'cwdaemon' uses a PC parallel or serial port and a simple transistor switch to output Morse code to a transmitter from a text message sent to it via the UDP protocol. It uses the soundcard or PC speaker to generate a sidetone. Cwdaemon can also handle PTT, and band index output for automatic switching of antennas, filters etc. Pinout is compatible with the standard (CT, TRlog).

Cxcl: 'cxcl' is an interpreter for the XCLE language. It is part of the XCL software suite, which aims to provide developers with tools for the programmatic handling of executable code, combining easy generation and manipulation with execution speed and memory efficiency at runtime.

CxxTest: CxxTest is a JUnit/CppUnit/xUnit-like framework for C++ that doesn't require RTTI, member template functions, exception handling, or any external libraries (including memory management, file/console I/O, or graphics libraries). It is distributed entirely as a set of header files which makes it extremely portable and usable.

DAViCal CalDAV Server: DAViCal is a server implementing the CalDAV protocol for shared workgroup calendaring. It uses the PostgreSQL database for backend storage of the calendar data.

DNRD: DNRD is a proxy DNS Daemon. It is useful for a home network where you have multiple ISPs or VPNs. DNRD can be set up to forward all DNS queries to the appropriate DNS server for each of your ISPs.

DNS Flood Detector: DNS Flood Detector was developed to detect abusive usage levels on high traffic nameservers and to enable quick response in halting (among other things) the use of one's nameserver to facilitate spam. DNS Flood Detector uses libpcap to monitor incoming dns queries to a nameserver. The tool may be run in either daemon or 'bindsnap' mode. In daemon mode, the tool will alarm via syslog. In bindsnap mode, the user is able to get near-real-time stats on usage to aid in more detailed troubleshooting.

Daemon: 'daemon' turns other processes into daemons. Many tedious tasks are required to set up a daemon process; 'daemon' performs these tasks for other processes. This is useful for writing daemons in languages other than C, C++, or Perl (e.g. sh, Java). If you want to write daemons in languages that can link against C functions (e.g. C, C++), see libslack, which contains the core functionality of daemon.

Danectl: DNSSEC DANE implementation manager: Generates and manages TLSA records (with certbot). Implements TLSA 3 1 1 current + next workflow. Also generates SSHFP, OPENPGPKEY, and SMIMEA records.

Dante: Dante is a free implementation of the proxy protocols socks version 4, socks version 5 (rfc1928), and msproxy. It can be used as a firewall between networks. The package consists of two parts, a socks server and a proxy client which supports socks, msproxy, and HTTP proxies.

Darkstat: Darkstat is an ntop-workalike network statistics gatherer. Built to be faster and smaller than ntop, it uses libpcap to capture network traffic and serves up Web page reports of statistics such as data transferred by host, port, and protocol. It also has a bandwidth usage graph.

Data.Gov Importer for the National Data Catalog: The National Data Catalog aims to be a complete catalog of all data sets and APIs that are either put out by the government or are derived from the government. Scoped to all government levels (federal, state, and local), and all branches (executive, legislative, judicial), NDC will be the one-stop shop for developers, researchers, and investigative journalists interested in government data. NDC will tap into the social benefits of having users come together around common interests. More than just a catalog, it will be a place for community-supported documentation about government data. This Ruby application moves data.gov datasets to the National Data Catalog.

DataparkSearch

DataparkSearch is an Internet and Intranet search engine tool. Key features:

Support for http, https, ftp, nntp and news URL schemes.
htdb virtual URL scheme support for indexing SQL databases.
text/html, text/xml, text/plain, audio/mpeg (MP3) and image/gif mime types built-in support.
External parsers support for other document types.
Ability to index multilangual sites using content negotiagion.
Searching all of the word forms using ispell affixes and dictionaries.
Stopwords and synonyms lists.
Boolean query language support.
Results sorting by relevancy, popularity rank, last modified time and by importance (a multiplication of relevancy and popularity rank).
Various character sets support.
Accent insensitive search.
Phrases segmenting for Chinese, Japanese, Korean, and Thai.
mod_dpsearch - search module for Apache web server.
Internationalized Domain Names support

Deliantra Maps: Deliantra is a free software cooperative multiplayer RPG and adventure game, much similar in style (and setting) to nethack and moria, but is fully graphical and runs in realtime. It is set in a classical medieval environment with ubiquitous weapons and magic. What makes this game special is its depth and the sheer amount of maps to explore: The world is vast (multiple continents, over 4000 manually designed maps, hundreds of monsters and countless variations of generated content) and complex (16 unique races, 17 classes, 40 skills and hundreds of spells to choose from and combine with each other), so there is a lot to explore. The game play is open and sets very few limits on character development. And of course a lot of fun is to be had by playing cooperatively with others exploring the same world.

Deliantra Server: Deliantra is a free software cooperative multiplayer RPG and adventure game, much similar in style (and setting) to nethack and moria, but is fully graphical and runs in realtime. It is set in a classical medieval environment with ubiquitous weapons and magic. What makes this game special is its depth and the sheer amount of maps to explore: The world is vast (multiple continents, over 4000 manually designed maps, hundreds of monsters and countless variations of generated content) and complex (16 unique races, 17 classes, 40 skills and hundreds of spells to choose from and combine with each other), so there is a lot to explore. The game play is open and sets very few limits on character development. And of course a lot of fun is to be had by playing cooperatively with others exploring the same world.

Devfsd: The devfsd program is a daemon, run by the system boot, which can provide for intelligent management of device entries in the Device Filesystem (devfs). It is desirable to start the daemon at the beginning of the boot scripts, in particular before filesystem checks.

Dhlan: dhlan scans and updates to /etc/hosts with a MAC:name table. It's the most simple and easy replacement of DNS server, to customize named localization of computers, printers or any other device accross any Local Area Network. For example, 2 laptops can maintain valid name-to-ip although network changes.

Diogene87: 'Diogene87' is a powerful job scheduling system. It features include:
*central management: jobs can be run on local or remote servers (on TCP/IP networks) *jobs dependences: jobs can wait for another to be terminated, started when an other is normally finished, or aborted *start condition: jobs can wait for a file-presence, a manual validation, or a specified time *planning: jobs can be planned at regular intervals *log of job activity: output of jobs (on console) are logged *job monitoring: a web interface controls job execution *statistics for job duration: minimum, maximum and average duration *resource control: the job queue has a threshold for the largest number of jobs that can run. The queue can be manually opened or closed if resources are not available.

Dircproxy: 'dircproxy' is an IRC proxy server ("bouncer") for people who use IRC from lots of different workstations or clients, but wish to remain connected and see what they missed while they were away. Users connect to IRC through dircproxy, and remain connected to the server, even after a client is detached from it. While they're detached, 'dircproxy' logs channel and private messages as well as important events; when users reattach it downloads those logs to you using ordinary IRC protocol.

Direvent: Direvent is a program that monitors a set of directories on the file system and reacts when their content changes. When a change is detected, the daemon reacts by invoking an external command configured for that kind of change. It became a GNU package on August 20, 2014. Until then it was named dircond.

Distcc: 'distcc' distributes compilation of C or C++ code across several machines on a network. It should always generate the same results as a local compile, is simple to install and use, and is often significantly faster than a local compile. 'distcc' does not require all machines to share a filesystem, have synchronized clocks, or to have the same libraries or header files installed. Machines can be running different operating systems, as long as they have compatible binary formats or cross-compilers. 'distcc' sends the complete preprocessed source code across the network for each job, so all it requires of the volunteer machines is that they be running the distccd daemon, and that they have an appropriate compiler installed.

Dkimap: 'dkimap4' is a fast, easy-to-install IMAP4 daemon. It supports mail folder quotas, ACL, and UID, and has support for passwd, shadow, and PAM authentication.

Dnsmasq: Dnsmasq is a lightweight DNS forwarder and DHCP server. It is designed to provide DNS and optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with DHCP-allocated addresses to appear in the DNS with names configured either in each host or in a central configuration file. Dnsmasq supports static and dynamic DHCP leases and BOOTP/TFTP for network booting of diskless machines.

Doorman: The Doorman is a "port-knocking" listener daemon which helps users secure private servers. It allows a Unix server to run invisibly, with all TCP ports closed.

Dovecot: 'Dovecot' is an IMAP server whose major goals are security and extreme reliability. It uses index files to optimally store the mailbox state, which makes it very fast even with huge mailboxes. Indexes won't prevent external mailbox updates, so Dovecot is still fully compatible with standard Maildir and mbox formats. There's also a fully featured POP3 server included.

EPICS: 'EPICS' is a software infrastructure for building distributed control systems to operate devices such as particle accelerators, large experiments and major telescopes. These systems comprise tens or hundreds of computers, networked together so they can communicate and provide control and feedback of the various parts from a control room, or remotely over the Internet. EPICS uses Client/Server and Publish/Subscribe techniques to communicate between the various computers. Most servers (called Input/Output Controllers or IOCs) perform real-world I/O and local control tasks, and publish this information to clients using the Channel Access (CA) network protocol. CA is specially designed for the kind of high bandwidth, soft real-time networking applications that EPICS is used for, and is one reason why it can be used to build a control system comprising hundreds of computers.

Enemies of Carlotta: 'Enemies of Carlotta' is a simple mailing list manager. It tries to mimic the ezmlm software somewhat, but is written completely from scratch in Python. It has a less restrictive license than ezmlm and qmail, and is smaller and simpler than GNU Mailman. It supports English, Finnish, French, and Spanish.

EsounD: When two or more applications want to play sounds at the same time, whoever gets to the audio device first wins. With EsounD (The Enlightened Sound Daemon) you can mix several audio streams for playback by a single audio device. You can also pre-load samples, and play them back without having to send all the data for the sound. Network transparency is built in, so you can play sounds on one machine, and listen to them on another.

Eventoj: Eventoj is a modular service that rotates tests and their actions to keep availability information and do something when a failure is found. For example, one module can be a tester of IMAP availability, and in case of failure notify by e-mail or send a restart command.

Expect: Expect automates interactive applications such as telnet, ftp, passwd, fsck, rlogin, tip, etc. It is also useful for testing these same applications. And by adding Tk, you can also wrap interactive applications in X11 GUIs. Expect can make easy all sorts of tasks that are prohibitively difficult with anything else. You will find that Expect is an absolutely invaluable tool - using it, you will be able to automate tasks that you've never even thought of before - and you'll be able to do this automation quickly and easily.

FAM: FAM, the File Alteration Monitor, provides an API which applications can use to be notified when specific files or directories are changed. It comes in two parts: fam, the daemon which listens for requests and delivers notification, and libfam, a library which client applications can use to communicate with fam

FFPF: This is a candidate for deletion: Links broken. From the maintainer "This was a research project from 2004 [1]. It is long dead now. It's probably best to remove the entry". Poppy-one (talk) 14:23, 29 July 2018 (EDT) The fairly fast packet filter (FFPF) adds many new features to existing filtering solutions. It is designed for high speed by pushing computationally intensive tasks to the kernel or to network processors, and by minimising packet copying. Also, since it provides a richer programming language and explicit extensibility, it is more flexible than existing approaches. Using its extensibility, the language can even be used as a meta- filter to "script" together filters from other approaches.

FIcy: 'fIcy' is a command line icecast/shoutcast stream grabber. Its goal is to cleanly and automatically rip a stream into user-customizable files. It will work with any ICY-compatible stream, so you can save the stream to disk, pipe the output to a media player, or do both.

FTPmond: FTPmond is a multithreaded daemon that informs a pre-defined mailing list when a new file is uploaded to a local FTP server. Mailing list members receive an e-mail containing a description of the length, date and name of the uploaded file, and of the success/failure of the transfer. Each FTP user can be added to a different mailing list.

Fail2Ban: Fail2Ban monitors log files like /var/log/pwdfail or /var/log/apache/error_log and bans failure-prone addresses. It updates firewall rules to reject the IP address or executes user defined commands. Fail2Ban can read multiple log files such as sshd or Apache web server ones.

Fake: Fake has been designed to switch in backup servers (especially Mail, Web and Proxy servers) on a LAN during periods of both unscheduled and scheduled down time. Fake allows you to take over the IP address (either physical or an IP alias) of another machine in the LAN by bringing up an additional interface and making use of ARP spoofing. It is designed to enable automated invocation via systems like Mon that monitor server availability. Fake can also be used in conjunction with load balancing mecanisms.

Fetchmail: Fetchmail is a full-featured, robust, well-documented remote-mail retrieval and forwarding utility intended to be used over on-demand TCP/IP links (such as SLIP or PPP connections). It supports every remote-mail protocol now in use on the Internet: POP2, POP3, RPOP, APOP, KPOP, all flavors of IMAP, ETRN, and ODMR. It can even support IPv6 and IPSEC. Fetchmail retrieves mail from remote mail servers and forwards it via SMTP, so it can then be read by normal mail user agents such as mutt, elm or BSD Mail. It allows all your system MTA's filtering, forwarding, and aliasing facilities to work just as they would on normal mail. Fetchmail can start automatically and silently as a system daemon at boot time. You can edit its dotfile directly, or use the interactive GUI configurator (fetchmailconf) supplied with the distribution.

Fget: This is a candidate for deletion: Links broken. No links to page. Last entry on archive.org 07/2009. Email to maintainer broken.Poppy-one (talk) 01:29, 29 July 2018 (EDT) 'fget' is a tool for mirroring remote files via FTP. It was designed as an analog to the GNU wget utility. The fget package includes an FTP client library, so that others can make use of FTP from within their own C programs.

Filewatcher: 'filewatcher' maintains a local file archive repository. A configuration file details which files and directories to monitor and to whom reports should be delivered. It is useful in situations where there are multiple sysadmins, each of whom should know as soon as possible what changes the other have made. Correcting or rolling back to the previous version is trivial.

Fingerd: This is a much updated version of Mike Shanzer's fingerd-1.3. It is almost completely rewritten, well-debugged (i.e., more secure), and quite configurable. It supports ACLs, a message-of-the-day file, the ability to run programs for given user-IDs, and a full set of command-line options that make it mostly compatible with modern BSD versions. It is portable, uses GNU Autoconf and GNU Automake for builds, and it comes with a ready-to-use BSD makefile too.

Fireflier: Fireflier is a firewall tool which is built on top of the iptables framework. It allows you to create rules based on single incoming network packets or to simply allow/deny single packets to pass. It features a client-server approach for administering from another PC, SSL connection between client and server, rules with timeouts (rules are deleted after some time or when fireflier-server shuts down), and filtering based on applications.

Firestorm: Firestorm is an extremely high performance network intrusion detection system (NIDS). At the moment it just a sensor but plans are to include real support for analysis, reporting, remote console and on-the-fly sensor configuration. It is fully pluggable and hence extremely flexible.

Flowd: 'flowd' is a small, fast, secure, and featureful NetFlow collector. It supports NetFlow versions 1, 5, 7, and 9 over IPv4 and IPv6 transports, IPv6 flows (using NetFlow 9), filtering and tagging of received flows using a packet filter-like language, Perl and Python APIs, flexible storage (with run-time selection of which NetFlow fields are stored), and privilege separation for security. A set of supplemental tools analysis and SQL database support is also included.

Flxplay: A simple FLX/FLC animation player.

Flyspell: Flyspell is an Emacs minor mode performing on-the-fly spelling checking. This spawns a single Ispell process and checks each word. The default flyspell behavior is to highlight incorrect words. It was hosted for a long time on INRIA Sophia-Antipolis's site in France, but is now maintained as a part of GNU Emacs.

Foomatic: Foomatic is the printer/driver database of Linuxprinting.org. The XML-based system integrates free software printer drivers with all common spoolers (CUPS, LPRng, LPD, GNUlpr, PPR, PDQ, CPS, etc.) in UNIX. It generates printer/driver description files which, together with spooler-specific filter scripts, allow easy setup of print queues with access to all driver options. Foomatic ships with every major distro and its Web site is used as a reference by vendors. It is an up-to-date and distribution-independent repository of printer and driver data, scripts, and utilities, accompanied by the wealth of knowledge, tips and tricks, solutions, and enlightenment provided by its newsgroups.

Forban: Forban is a kind of p2p (peer2peer) filesharing application for link-local and local area network. Forban works independently from Internet and use only the local area capabilities to announce, discover, search or share files. Forban relies on HTTP and he is opportunistic (meaning replicating any files seen in his proximity or interest).

FreeWRLDI: This is a candidate for deletion: Links broken. No links to page. Email to maintainer broken. Poppy-one (talk) 02:32, 31 July 2018 (EDT) FreeWRLDI (FreeWRLduneInputDevice), together with FreeWRL, lets you "hover" through 3D data in the Web with 4 degree of freedom input devices. It is based on FreeWRL's "/tmp/inpdev" extern sensor input interface and white_dune's input device mechanism.

Freedce: 'freedce' is a free implementation of DCE RPC, with development aimed at implementing DCOM for GNU/Linux (and other *NIX systems).

Freeipmi: FreeIPMI is a collection of in-band and out-of-band IPMI software in accordance with the IPMI v1.5/2.0 specification. These programs provide a set of interfaces for platform management. Common functionality includes sensor monitoring, system event monitoring, power control and serial-over-LAN.

Freytag DataMatrix Decoder: Detects DataMatrix barcodes in images and decodes them. Currently in C#, usable from any .net language. Simple usage and unlimited fiddling possibilities.

Fsh: 'fsh (fast remote shell)' is a drop-in rsh-compatible replacement for ssh that automatically reuses ssh tunnels. Also included is fcp, which is a drop-in replacement for scp that uses the same tunnels. Logging in to a remote system with a cryptographic solution such as lsh or ssh takes time. This solves the problem of slow logins due to the computationally expensive key exchanges that occur when you establish a remote connection is established with a machine that has ssh or lsh.

Fwanalog: 'fwanalog' is a shell script that parses and summarizes firewall logfiles. It understands logs from ipf (xBSD, Solaris), OpenBSD 3.x pf, Linux 2.2 ipchains, Linux 2.4 iptables, and a few types of routers and firewalls.

Fwlogwatch: 'fwlogwatch' is a packet filter and firewall log analyzer. It can output its summaries in text and HTML, with various formatting options. It can produce customizable incident reports and send them to abuse contacts at offending sites or CERTs. Fwlogwatch can also run as a daemon (with Web interface) doing realtime log monitoring and reporting anomalies or starting attack countermeasures. It can detect and process log entries in the following formats:
* GNU/Linux ipchains * GNU/Linux netfilter/iptables * Solaris/BSD/Irix/HP-UX ipfilter * BSD ipfw * Cisco IOS * Cisco PIX / FWSM * NetScreen * Elsa Lancom router * Snort IDS

GGZ Gaming Zone: The GGZ Gaming Zone develops a free gaming environment, based on a client-server architecture. More than 20 games are already available directly from the project, and integration into the major free desktops like KDE and GNOME is also being done. Player privacy, lack of advertisements and source code availability for game routine verification make this project a reliable platform for free games. Several independent game projects do already support playing over GGZ.

Getmail: Getmail is a flexible, extensible mail retrieval system with support for POP3, IMAP4, SSL variants of both, maildirs, mboxrd files, external MDAs, arbitrary message filtering, single-user and domain-mailboxes, and many other useful features.

Gld: 'gld' is a standalone greylisting server for Postfix. It listen on a TCP port and uses MySQL for storing data. The server supports whitelists based on sender, sender_domain, and client_ip. It also supports light greylisting and DNS white lists.

Gmane: 'gmane' funnels mailing lists into news groups. This isn't a new idea, but with Gmane no messages are ever expired from the server, and the gateway is bidirectional. You can post to various lists without being subscribed to them. There are currently 5,944 mailing lists subscribed to Gmane, with a total of 18,747,653 messages. The package includes we:search (a search engine), weaverd (a back-end daemon that generates thread and group views), weft (takes a mail or a news message and formats it into HTML), and loom (news reader and front end to weaverd and weft).

Gnome BitTorrent Downloader: A GNOME "mime-sink" for BitTorrent files. It's not meant to be an entire front-end, just a program that pops up when you "execute" the torrent files.

Gnome-pilot: A daemon for pilot synchronization; includes conduits, panel applet, and control center applet.

Gnotary: Gnotary is an asynchronous peer-to-peer digital notary service based on email. The server polls POP3 mail boxes scanning for specified key words in the subject line. A digital signature of the email body is returned to the sender. The main purpose is to allow medical practitioners to establish a peer-to-peer based notary service for their electronic health records.

Gnunet: GNUnet is a framework for secure peer-to-peer networking that does not use any centralized or otherwise trusted services. Its high-level goal is to provide a strong free software foundation for a global network that provides security and privacy. GNUnet started with an idea for anonymous censorship-resistant file-sharing, but has grown to incorporate other applications as well as many generic building blocks for secure networking applications. In particular, GNUnet now includes the GNU Name System, a privacy-preserving, decentralized public key infrastructure.

GoVPN: GoVPN is simple virtual private network daemon, aimed to be reviewable, secure, DPI/censorship-resistant, written on Go. It uses fast strong passphrase authenticated key agreement protocol with augmented zero-knowledge mutual peers authentication (PAKE DH A-EKE). Encrypted, authenticated data transport that hides message's length and timestamps. Optional encryptionless mode, that still preserves data confidentiality. Perfect forward secrecy property. Resistance to: offline dictionary attacks, replay attacks, client's passphrases compromising and dictionary attacks on the server side. Built-in heartbeating, rehandshaking, real-time statistics. Ability to work through UDP, TCP and HTTP proxies. IPv4/IPv6-compatibility.

Grabcomics: phpGrabComics is a program that fetches and saves comic strips from the web. It features both a server, which can download strips from different sources, and ports, tiny applications which get the list of available comics from the server. The latest version supports more than 350 comic strips.

Grafist: Grafist is a bandwidth utilization viewer. It gets the bandwidth utilization information for eth0 from the /proc/net/dev file in 15-second periods, and stores it in four data files (daily, weekly, monthly, and yearly). When a request is sent to index.php, it executes four programs to create graphics (using the GD library) and a summary for each file. Grafist currently supports 24 different languages

Gronk: Gronk is a Web-based MP3 jukebox. It generates heavily-hyperlinked Web pages listing all of your ripped CDs, by extracting information from CDDB data. These Web pages allow easy selection of songs or albums to play, and when nothing has been explicitly selected, it selects songs randomly. Playback is done via either XMMS or mpg123. It is built around static HTML pages, not a database.

Grsecurity: 'grsecurity' is a complete security system for Linux 2.4 that implements a detection/prevention/containment strategy. It prevents most forms of address space modification, confines programs with least privilege via its process-based ACL system, hardens syscalls, and provides many of the OpenBSD randomness features. It has auditing capabilities and a netfilter module designed to thwart portscans and OS fingerprinting.

Guix ,: Guix is a transactional package manager and an advanced distribution of the GNU operating system. It can be used on top of any system running the Hurd or the Linux kernel, or it can be used as a standalone operating system distribution for i686, x86_64, ARMv7, AArch64 and powerpc64le machines. It can also cross compile applications for these architectures/OS combination and Windows 32/64 bit (mingw-w64), GNU/Linux mips64el, PowerPC 32/64 bit big endian, RiscV64. Support for Android is unofficial. In addition to standard package management features, Guix supports transactional upgrades and roll-backs, unprivileged package management, per-user profiles, and garbage collection. When used as a standalone GNU/Linux distribution, Guix offers a declarative, stateless approach to operating system configuration management. Guix is highly customizable and hackable through Guile programming interfaces and extensions to the Scheme language.

Gup: gup, the Group Update Program, is a Unix mail-server that lets a remote site change their newsgroups subscription without requiring the intervention of the news administrator at the feed site. 'gup' is suited to news administrators that find they are spending an inordinate amount of time editing the INN newsfeeds file on behalf of the remote sites.

Gzochi: gzochi (/zoʊ-ʧi:/) is a framework for developing massively multiplayer online games. A server container provides services to deployed games, which are written in Guile Scheme, that abstract and simplify some of the most challenging and error-prone aspects of online game development: Concurrency, data persistence, and network communications. A very thin client library can be embedded to provide connectivity for client applications written in any language.

Heartbeat: 'heartbeat' monitors hosts and informs the cluster when one of them dies. It includes code from "fake" for IP address takeover. It currently works for 2-node clusters and supports multiple interfaces per node.

Heimdal: Kerberos is a network authentication protocol defined in RFC 1510. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Heimdal contains library support and various servers and clients, both adminstrative and Kerberos-enabled daemons such as telnet.

Hermes Antispam Proxy: Hermes is a generic, transparent, multi-platform anti-spam SMTP proxy that uses a combination of techniques (like greylisting, throttling, etc.) to stop spam from reaching your mailbox. It's compatible with most SMTP extensions like STARTTLS (for SSL security) and SMTP-AUTH (for user authentication).
It's main strength is ease of configuration as you don't have to modify your current email setup and can work in combination with other spam filtering solutions.

Hipercontracer: High-Performance Connectivity Tracer (HiPerConTracer) is a ping/traceroute service. It performs regular ping and traceroute runs among sites and can export the results into an SQL or Non-SQL database.

Hldfilter: This is a candidate for deletion: Links broken. Email to maintainer broken. Poppy-one (talk) 16:00, 2 August 2018 (EDT) HLDFilter is an email filter intended to replace procmail. It filters mail automatically into separate folders, and rejects unwanted mail (spam). You can auto respond with the contents of files or commands, as well as report spam to a spammer's ISP. You can also log messages, add them to a statistical Web page where you can analyse them graphically, and verify the validity of a sender's address.

Honeyd: 'Honeyd' is a small daemon that creates virtual hosts on a network. The hosts can be configured to run arbitrary services, and their TCP personality can be adapted so that they appear to be running certain versions of operating systems. 'Honeyd' lets a single host claim multiple addresses on a LAN for network simulation. Users can ping and/or traceroute the virtual machines. Any type of service on the virtual machine can be simulated or proxied to another machine according to a simple configuration file.

Httpdstats: httpdstats is a perl script that generates a statistical summary of the contents of an Apache access log and either prints the summary or sends it, via mail, to somebody. This program is intended for use on small, low-traffic web servers, where the full power of a larger more complex program represents overkill. The main intended use for httpdstats is as a cron job, so that the web administrator can receive a daily report on server usage just before the logs are rotated; an anacron script and configuration file are installed for that purpose. The results can either printed directly or mailed to an interested party as text or HTML. Configuration files can be used to set the various options available. Certain file suffixes, for file types such as JPEG, PNG or GIF images, can be collapsed into grouped entries, to avoid cluttering up the report with labels, logos and other meaningless data.

Httplog: This is a candidate for deletion: broken links, can't find elsewhere, not on archive.org, my email to author was returned to sender. Danm (talk) 23:26, 31 October 2017 (EDT) 'httplog' is a replacement for Apache's 'rotatelogs' and Andrew Ford's 'chronolog'. It lets you specify a logfile using strftime parameters in the filename to act as a template. This means that the logs in your logfiles will also be sorted according to the filename, instead of as one huge file. For example, if you specify a logfile of /var/log/http%Y%m%d.log, a new log file would be generated each day, with content for only that one day. It also supports compression of logfiles using gzip.

Hyper Estraier

Hyper Estraier is a full-text search system. You can search lots of documents for some documents including specified words. If you run a web site, it is useful as your own search engine for pages in your site. Also, it is useful as search utilities of mail boxes and file servers. The characteristic of Hyper Estraier is the following.

High performance of search
High scalability of target documents
Perfect recall ratio by N-gram method
High precision by hybrid mechanism of N-gram and morphological analyzer
Phrase search, regular expressions, attribute search, and similarity search
Multilingualism with Unicode
Independent of file format and repository
Intelligent web crawler
Simple and powerful API
Supporting P2P architecture

IBackup: This is a candidate for deletion: Links broken. Email to maintainer broken. Poppy-one (talk) 17:55, 2 August 2018 (EDT) 'ibackup' lets you automate (with cron) the backup of system configurations. It is easy to extend it for your systems and adapt to your needs. It supports exclude lists, upload, and encryption of your backups.

IDSA: This is a candidate for deletion: Links broken. Email to maintainer broken. Poppy-one (talk) 18:02, 2 August 2018 (EDT) IDS/A is a research project to equip trusted applications with some form of "security awareness." It consists of a combined system logger, reference monitor, and intrusion detection system for applications that lets you monitor and adjust application activity. Features include a powerful logging component and an extensible and modular access control subsystem which can be driven by misuse signatures, anomaly detection modules, or even a human operator.

IP Accounter: IP Accounter is an IP accounting package that collects, summarizes, and displays IP accounting data. Its output can be a simple ASCII table, or graph images. The program supports both ipchains and iptables, stores logs in files, gdbm, or a PostgreSQL database.

IWatch: iWatch is a real-time filesystem monitoring program. It is a tool for detecting any changes on your filesystem and reporting it to the system administrator immediately. It uses a simple configuration file in XML format and is based on inotify, a file change notification system in the Linux kernel.

Icegenerator: IceGenerator is a direct stream generator for Icecast/Shoutcast servers. It streams MP3s to an Icecast server without resampling, which saves CPU. Its main features are support for many playlist format (directories, MySQL tables, etc.), metadata information, and a telnet interface for commands. It runs as a daemon; its main use is for radio automation (i.e., you can run it through cron).

Icpld: ICPLD (Internet Connection Performance Logging Daemon) is a connection monitor that sends ICMP requests to stated IP addresses and monitors if your machine has a working network connection. It logs failed attempts to reach the hosts, and stamps a log as soon as it gets a reply. It tracks of when and for how long a connection was unavailable and records both total down time and each occasion of interrupted connection. It supports IPv6 and can execute a command whenever a connection goes up or down (useful for alerting users).

Ifmail-tx: Delivers Fidonet mail packets over telephone lines and TCP/IP connections; converts Fidonet net- and echo-mail to RFC-822/RFC/1036 compliant mail and news and vice versa. In cooperation with MTA and netnews packages allows to run a Fidonet node (or point) on a UNIX machine.

Ikkes Volume Manager: Ivman is a generic handler for HAL events. Originally for automounting, it can now be used to run arbitrary commands when events or conditions occur or properties are modified on your hardware (e.g., run a command when you close your laptop's lid, run a command when a particular device is attached or a particular CD is inserted, etc).

Ingres: Ingres is descendant to the oldest DBMS currently in use, the same original codebase as PostgreSQL. It has been free software under the GNU GPL v2 for a few years now.

Internet Junkbuster: The Internet Junkbuster Proxy (TM) blocks unwanted banner ads and protects your privacy from cookies and other threats. It works as a proxy that stands between your browser and the Internet, checking every HTTP request for each resource (including graphics) against a blockfile of URLs before sending it over the Internet. It can be configured as a plain old non-caching, non-blocking proxy as well, and can be used with just about any browser. It also helps prevent the disclosure of other details that surfers often want kept private, such as information about the page clicked on, and their computer's software and hardware configuration. These features can be optionally disabled or altered. See Privoxy, a more recently updated program based on Internet Junkbuster.

Ip-sentinel: 'IP Sentinel' is a tool that tries to prevent unauthorized usage of IP addresses within an ethernet broadcast domain by answering ARP requests. After receiving faked replies, requesting parties store the MAC in their ARP tables and will send future packets to this invalid MAC, rendering the IP unreachable.

Ipfc: IPFC is software and a framework to manage and monitor multiple types of security modules across a global network. Modules can be packet filters (like netfilter, pf, ipfw, IP Filter, checkpoint FW1, etc.), NIDS (Snort, arpwatch, etc.), Web servers, or other general devices (from servers to embedded devices). It features log collection for different security "agents", dynamic log correlation possibilities, and easy extensibility due to the generic database and XML message formats used.

Ipsvd: 'ipsvd' is a set of Internet protocol service daemons for TCP/IP and UDP/IP. A daemon waits for incoming connections on a socket; for new connections, it conditionally runs an arbitrary program to handle the connection. The daemons can be told to read and follow pre-defined instructions on how to handle incoming connections. Based on the client's IP address or hostname, they can run different programs, set a different environment, deny a connection, or set a per host concurrency limit. 'ipsvd' can be used to run services usually run by inetd, xinetd, or tcpserver. Normally the ipsv daemons are run by a supervisor process, such as 'runsv' from the runit package, or 'supervise' from the daemontools package.

JAMlib: JAMlib is a collection of subroutines that encapsulate much of the format-specific and tedious details of the JAM message base format. By using these routines, application programmers can concentrate on the higher-level issues of their programs instead of worrying about their JAM routines.

Jackrabbit Relay: Jackrabbit Relay is a framework to manage trading signal alerts in JSON format from TradingView or similiar software to place trades on an exchange or broker.

Janus internetwork channel linker: Janus is a server that allows IRC networks to share certain channels to other linked networks without needing to share all channels and make all users visible across both networks. If configured to allow it, users can also share their own channels across any linked network.

JavaDICT: This is a candidate for deletion: Cannot find download. Email to maintainer broken. Poppy-one (talk) 13:23, 6 August 2018 (EDT) JavaDICT is a server for the DICT protocol (RFC 2229), a TCP transaction-based query/response protocol that lets a client access dictionary definitions from a set of natural language dictionary databases. So far it is the only DICT server that lets you access dictionaries stored in a database (currently only PostgreSQL is supported).

Jenkins: Jenkins is a continuous integration (build automation) server. Built using Java, it provides over 930 plugins to support building and testing virtually any project.

Joyd: Joyd lets you execute commands via a joystick or joypad attached to your computer. You can bind commands to single buttons. movements of your stick, or combinations of the two. One simple possibility would be to reboot when your keyboard is hung. It can use any device supported by the Linux Joystick Driver. You can test the joystick status in your own shell scripts by using helper applications.

Ka2dyn

Ka2dyn presents the following characteristics :

can display extended debugging infos when asked for,
can log via syslog when asked for,
can run in dummy mode when asked for,
can handle more than one service at a time,
each service is assured by a dynamically loaded library.

Kannel

Kannel functions as an SMS (Short Message Service) gateway and as a WAP (Wireless Application Protocol) gateway. The functions are independent, and can be used separately or both at once. When used as an SMS gateway, Kannel can receive messages from one or more SMS centers and convert them into HTTP requests. It also has an HTTP interface for sending messages back to the SMS centers, and it can send text responses directly from a configuration file. Kannel supports the following SMS center protocols:

CIMD 1.3 and CIMD 2.0 over IP
SMPP 3.3 over IP
UCP/EMI 2.0 over IP and serial
SEMA SMS2000 OIS 4.0 and 5.0 over Radiopad and X.25

Kannel can also exchange messages with a mobile phone or GSM modem, in effect using it as an SMS center. When used as a WAP gateway, Kannel functions as described in the http://www.wapforum.org (WAP Forum) specifications, except that not all mandatory features of the WAP 1.1 conformance release have been implemented yet. Currently it supports:

WSP: connection oriented and connectionless modes.
WTP: class 0 and 2.
WDP: UDP bearer (GSM datacalls and GPRS).
WML and WMLScript compilers.

Kxparse: KXParse is a PHP-based, lightweight, easy-to-use XML parser. It's an include file that's loaded on the fly, so it does not need to be installed.

LCDnetstat: LCDNetstat is a program which displays the TCP/IP connections of a computer on a external LCD screen. It shows the IP of the remote computer, and the port it uses on your computer. If there's no current conection, it shows the most recent one with a timestamp. It use /proc/net/tcp and parses the results to an LCD screen.

LUCAS: Lets users configure network servers and/or services centrally The traditonal way to manage UN*X boxes is doing configuring work on a per host basis. While this works quite well on single host setups, it quickly becomes a nightmare when it comes to clustered systems, load balancing systems or server farms, where configurations have to be shared/spread/replicated between several more or less independant machines. The LUCAS project aims at creating a framework, where configuration data may be conviniently kept in an central LDAP database and is automatically send to the desired destination from there.

Laplock: Laplock, Lock my computer with a SD-Card! Laplock does not only save your laptop, but will also save your files. The Idea: A special SD-Card in your box and anything will run just normal to work with. Pull out the card (someone is knocking at the door) and the box is locked, so there is no way to access it anymore. Furthermore the laptop will not start if the card is not inside. Quite important, if the laptop "gets lost" for some reason.

Launchtool: 'launchtool' runs a user-supplied command that supervises the execution of an application by controlling its environment, blocking signals, logging its output, changing user and group permissions, limiting resource usage, restarting it if it fails, running it continuously, turning it into a daemon, and more.

Libgmail: The `libgmail` project is a pure Python binding to provide access to Google's Gmail web-mail service. The library currently ships with a demonstration utility to archive messages from a Gmail account into mbox files, suitable for importing into a local email client. Also includes a demonstration utility that acts as a SMTP proxy to allow mail to be sent from any standard mail client that uses SMTP (e.g. Mail.app, Mozilla etc). New demonstration utility acts as a POP3 proxy to allow mail to be retrieved from any standard mail client that uses POP3 (e.g. Mail.app, Mozilla etc). Features demonstration utility to provide access to Gmail message attachments via a download-only FTP proxy--this allows retrieval of suitably marked attachments by a standard FTP client. Utilize more of your Gmail space!

Lighttpd: 'lighttpd' is a secure, fast, compliant, and very flexible Web server which has been optimized for high-performance environments. It has a very low memory footprint compared to other Web servers, and it takes care of CPU load. It has an advanced feature set that includes FastCGI, CGI, Auth, Output-Compression, URL-Rewriting, and much more.

LineControl Server: LineControl remotely controls the connection of a GNU/Linux masquerading server using multiple clients. It takes care with the number of clients using the connection and decides, based upon this number, whether the connection should be up or down. The clients show connection time and throughput statistics. The package supports different connection types, such as analog modems, ISDN, or even cable modems and ADSL devices.

Lingerd: Lingerd is a daemon designed to properly close network connections from an HTTP server (ie Apache). This frees the server from doing the boring but time-consuming job of "lingering closes", and lets each process go on to the next connection immediately. As a result, Apache needs fewer processes to handle high loads. This saves memory, reduces kernel contention, and makes Apache more scalable.

Linphone: Linphone is an Internet phone or Voice Over IP phone (VoIP). It lets you make two-party phone calls using the Internet.

LinuxTaRT: TaRT stands for "The Automatic Random Tagline", a versatile, fast and feature-rich email signature generator. TaRT features include random taglines, optional daemon functionality, display of current date, custom layout of signature, and "special date" tagline text. The command line syntax is simple and well explained. LinuxTaRT is designed to be run as a stand-alone daemon, from crontab, or in your login script.

Lire: Lire is a pluggable log analyzer. It has analyzers for over 25 log file formats, ranging from Apache WWW log files to iptables firewall logs and CUPS printing logs. Reports are generated in 9 different output formats, optionally with included graphs.

Listener: 'listener' is a security-related program like 'motion' (which detects motion on a Webcam): it listens for sound. If it detects any, it starts recording until the sound stops (or a bit later, which is configurable). It stores the audio in .WAV files

Logcheck: 'logcheck' automatically monitors your system logs and periodically mails security violations and other strange events to you. It can process logfiles from Psionic's PortSentry and HostSentry, system daemons, Wietse Venema's TCP Wrapper and Log Daemon packages, and the Firewall Toolkit by Trusted Information Systems Inc.(TIS). This product was formerly known as 'LogSentry.'

Logrep: 'Logrep' is a secure multi-platform framework for the collection, extraction, and presentation of information from various log files. It features HTML reports, multi-dimensional analysis, overview pages, SSH communication, and graphs, and supports more than 15 popular systems including Snort, Squid, Postfix, Apache, syslog, iptables/ipchains, Firewall-1, and wtmp.

LooperNG: LooperNG is an intelligent event routing daemon. Primarily used for Network Management, this application can be used to accomplish a variety of tasks related to logging and alerting such as trap forwarding/exploding, event enrichment, converting event formats (syslog->SNMP, SNMP->flatfile, syslog->Netcool), etc. It uses a system of input and output modules to interface with the event sources/sinks and a "rules file" to control the flow of the events.

Lsh: 'lsh' is a GNU GPL-licensed implementation of the SSH (version 2) protocol. It includes a server, a client, and various utility programs.

Lufs: LUFS is a hybrid userspace filesystem framework supporting an indefinite number of filesystems (localfs, sshfs, ftpfs, httpfs, socketfs, freenetfs, and nutellafs) transparently for any application. It can be regarded as doing the same job as the VFS (virtual filesystem switch) in the kernel: it is a switch, distributing the filesystem calls to its supported filesystems. However, LUFS filesystems are implemented in userspace. This would be a drawback for local filesystems where the access speed is important, but proves to be a huge advantage for networked filesystems where the userland flexibility is most important.

LysKOM-server: 'LysKOM' is an online, text based, interactive discussion system: a mix between Mail, News, IRC and a BBS. The server and (some of) the client(s) can speak both Swedish, English and other languages. LysKOM is similar to netnews, but LysKOM is intended for local discussions (instead of worldwide). LysKOM is much faster than netnews but like in netnews the articles are saved so that you don't have to be logged in to receive the news. LysKOM is a client-server system. The server process maintains a data base of persons, conferences and articles. The clients connect to the server and let the users browse the database for unread articles. This project is the server software itself, but there is a list of the many clients to choose from on the home page.

MLdonkey: MLDonkey is a multi-network file-sharing client. It was the first free software client to access eDonkey. It runs as a daemon that can be controlled through telnet (command-line), HTTP (Web pages), and many different GUIs. All these interfaces can be used locally or remotely (after disabling security restrictions). It can currently access eDonkey, Overnet, Fasttrack (KaZaA, Imesh), Gnutella, Gnutella2 (Shareaza), BitTorrent, and Soulseek; support for other networks is only partial. Networks can be enabled/disabled and searches performed in parallel on all enabled networks. Each file is downloaded from only one network but from multiple clients concurrently.

MQS: MQS (Minimalist Queue Services) is a minimalist queueing system that provides basic methods for offering asynchronous messaging. It lets applications store and retrieve messages to a dedicated queue in the queue services. This avoids direct connections between applications and provides a simple asynchronous communication system. The MQS Daemon provides a simple set of XML-RPC methods for pushing and getting messages in a given queue (you can use the system with any application that can talk XML-RPC). The queue is stored in either a database (e.g. Mysql, Postgresql) or in dedicated file(s) (e.g. QDBM).

MagicStats: MagicStats is a Web server log analysis tool that aims to be powerful and flexible, while still maintaining high performance. It is customizable on three levels (plugins, themes, and config files). There is substantial documentation for both users and developers.

Mah-Jong: Mah-Jong is a set of three programs comprising a networked Mah-Jong game, a graphical client for humans, and a basic computer player. The game can be played by four humans, by a human and three computer players, or any other combination. The version of Mah-Jong is that generally called Chinese Classical. It should not be confused with the solitaire games such as xmahjongg.

Mail-bounce: Mail-bounce reads a mail message from stdin, encapsulates it to make it look like it came from the mailer daemon and returns it to the sender. It can send fake bounces to spammers so they think your account doesn't exist or notify your "friends" who send you viruses. You can provide multiple templates for bounced messages and make variable substitutions within those templates. This lets you combine mail-bounce with E-mail filters to do almost any kind of auto-response. The program does its own SMTP connection so it doesn't matter which (if any) mail program you have.

MailScanner: MailScanner is an email virus scanner, vulnerability protector, and spam tagger. It supports the Postfix, Sendmail, Exim and ZMailer MTAs, and the Sophos, McAfee, F-Prot, F-Secure, CommandAV, InoculateIT, Inoculan 4.x, Kaspersky, Nod32, AntiVir, RAV, Panda, and Clam anti-virus scanners. It supports SpamAssassin for highly successful spam identification. It is specifically designed to handle denial of service attacks. It is very easy to install, and requires no changes at all to your sendmail.cf file. It is designed to be lightweight, and won't grind your mail system to a halt with its load; a good PC can process over 1.5 million messages per day. It can be integrated into any email system, regardless of the software in use.

Maildrop: Maildrop is a powerful email filter/delivery agent. Maildrop reads a mail message from standard input, then delivers the message to your mailbox. maildrop knows how to deliver mail to mbox-style mailboxes, and maildirs. The program optionally reads filtering instructions from a file; this lets you deliver mail to alternate mailboxes or have it forwarded. Large messages are saved in a temporary file, and are filtered from the temporary file. Temporary files are saved in the user's home directory. If standard input is a file (not a pipe) a temporary file is not necessary. Maildrop also checks the syntax of the mail delivery instructions the filter file, before attempting to deliver a message. If the filter file contains syntax errors, maildrop terminates without delivering the message. Users can fix typos without losing mail.

Mailfromd: Mailfromd is a general-purpose mail filtering daemon for Sendmail and Postfix. It is able to filter both incoming and outgoing messages using criteria of arbitrary complexity, supplied by the administrator in the form of a script file. The program interfaces with Sendmail using Milter protocol. Mailfromd provides the following basic features: flexible programming language for writing filter scripts, sender address verification, SPF, DNSBL, greylisting and whitelisting, controlling mail sending rate.

Mailfront: 'mailfront' is a set of customizeable network protocol frontends for mail servers, replacing or supplementing the features available with the MTA software. It contains complete SMTP, QMQP, QMTP, and POP3 front-ends as well as an authentication module for IMAP. The mail delivery front-ends also contain internal address filtering features. Two SMTP back-ends are provided. One delivers mail to qmail-queue, mimicking most of the behavior of qmail-smtpd, with the addition of support for SMTP AUTH. The other rejects all SMTP commands if $SMTPREJECT is set, and execs its command line otherwise (in order to run the above program).

Mailutils: Mailutils is a collection of programs for managing, viewing and processing electronic mail. It contains both utilities and server daemons and all operate in a protocol-agnostic way. The underlying libraries are also available, simplifying the addition of mail capabilities to new software. Several tools are built atop of these libraries and included in the package. Among them are pop3 and imap4 servers, the traditional mailx mail reader, the sieve mail filtering utility and a complete set of MH utilities that can be used with GNU Emacs MH-E mode.

Mako: mako is a lightweight notification daemon for Wayland compositors that support the layer-shell protocol.

Mandos: The Mandos system allows computers to have encrypted root file systems and at the same time be capable of remote and/or unattended reboots. WouldnÃ¢â¬â¢t it be great if you could have the security of encrypted root file systems and still have servers that could boot up automatically if there was a short power outage while you were asleep? That you could reboot at will, without having someone run over to the server to type in the password? Well, with Mandos, you (almost) can! The gain in convenience will only be offset by a small loss in security. The setup is as follows: The server will still have its encrypted root file system. The password to this file system will be stored on another computer (henceforth known as the Mandos server) on the same local network. The password will *not* be stored in plaintext, but encrypted with OpenPGP. To decrypt this password, a key is needed. This key (the Mandos client key) will not be stored there, but back on the original server (henceforth known as the Mandos client) in the initial RAM disk image. Oh, and all network Mandos client/server communications will be encrypted, using TLS (SSL).

MaraDNS: 'MaraDNS' is a fully functional DNS server supporting authoritative DNS, recursive DNS, and caching DNS. It is intended for environments where a DNS server must be secure and where the server must use the absolute minimum number of resources possible. Its security features include the use of a special string library which is resistant to buffer overflows and that the code, if started as root, mandates running as an unpriviledged user in a chroot() jail.

Mars: Mars is a simple services-oriented network status monitor. It works by simulating client connections to Internet services and reporting when those services are not responding as expected. It is quick and easy to install and configure, which distinguishes it from other, more complex, more fully-featured network monitoring tools.

Mbot: 'mbot' is an IRC bot whose main advantage is that several bots can run simultaneously in the same process. This makes it ideal for shells where the background processes, but not the connections, are limited. It also features IPv6 support, TCL scripting partially compatible with eggdrop, and other modules with the most commonly needed functions.

Mcron

The mcron program represents a complete re-think of the cron concept originally found in the Berkeley and AT&T unices, and subsequently rationalized by Paul Vixie. The original idea was to have a daemon that wakes up every minute, scans a set of files under a special directory, and determines from those files if any shell commands should be executed in this minute. It'is a 100% Vixie cron replacement written in pure Guile. As well as accepting traditional crontabs, it also accepts configuration files written in Scheme for infinite flexibility in specifying when jobs should run (it could take the system load into account, for example). The new idea is to read the required command instructions, work out which command needs to be executed next, and then sleep until the inferred time has arrived. On waking the commands are run, and the time of the next command is computed. Furthermore, the specifications are written in scheme, allowing at the same time simple command execution instructions and very much more flexible ones to be composed than the original Vixie format. This has several useful advantages over the original idea. (Changes to user crontabs are signalled directly to mcron by the crontab program; cron must still scan the /etc/crontab file once every minute, although use of this file is highly discouraged and this behaviour can be turned off).

Does not consume CPU resources when not needed. Many cron daemons only run jobs once an hour, or even just once a day.
Can easily allow for finer time-points to be specified, i.e. seconds. In principle this could be extended to microseconds, but this is not implemented.
Times can be more or less regular. For example, a job that runs every 17 hours can be specified, or a job that runs on the first Sunday of every month.
Times can be dynamic. Arbitrary Guile (scheme) code can be provided to compute the next time that a command needs to be run. This could, for example, take the system load into consideration.
Each user looks after his own files in his own directory. He can use more than one to break up complicated cron specifications.
Each user can run his own daemon. This removes the need for suid programs to manipulate the crontabs, and eliminates many security concerns that surround all existing cron programs.
The user can obtain an advance schedule of all the jobs that are due to run.

Mediatex: The Mediatex project intends to make easier as possible archives management by spreading and accessing "write once read many" supports (as compact disks) and dedicated metadata. It provides a server sharing perennial URLs on electronic records.

MessageWall: MessageWall is an SMTP proxy. It sits between the outside world and your mail server and keeps out viruses, spam, and mail relaying. It offers filtering via header and body checks, DNS-based blacklists for IP addresses (DNSBL) and domains (RHSBL), and DNS-based distributed checksumming (DNS DCC) similar to Vipul's Razor. Features can be filtered on a per-address basis, and since MessageWall communicates via SMTP, it works with any MTA. It also offers message tagging as a per-address configurable alternative to message blocking. MessageWall organizes filtering customizations into profiles. The configuration file defines a default profile, and a seperate file specifies addresses and domains with profiles other than the default. Each profile contains a set of rules for how to filter mail. There are currently 14 rules available.

Miau: 'miau' is a small, fully featured IRC bouncer. Features include so-called quicklogging, logging, auto-opping, and dcc-bouncing. Most features can be enabled/disabled with a configure script. 'miau' offers a service a bit like HTTP-proxy, but for IRC networks. The difference is that when IRC-client disconnects from bouncer, the connection to the server isn't necessarily lost, so your nick can stay online and cannot be taken by the others. In case bouncer does loses the nick, it can try to get it back automatically. Also, when using bouncer, the hostname appearing in IRC is that of the machine the bouncer is running at, not the one you are IRCing from.

Mice: Mice (Mundungus Internet Connection Enhancer) is a server designed for a home network where one machine has a modem to connect to the Internet. Clients on other machines can communicate with the server and ask it to connect to the Internet. The server keeps track of client requests and disconnects when all clients no longer require connection. Mice server does not connect to the Internet itself--it relies on programs such as pppd to do that.

Microbrew Microsieve: Microbrew MicroSieve is a high speed spam filter for USENET news. Given the large amount of spam riding around in major USENET news systems, a spam filter has to be very fast and remain effective. It checks for duplicate and large articles, spambots, and binaries in non-binary groups. It also has path-based auto-accept and auto-reject, as well as cross-post limiting.

MiddleMan: MiddleMan is a fast HTTP/HTTPS proxy server that removes unwanted content and increases privacy. It uses an XML configuration file, and fully implements the HTTP 1.1 protocol, including persistent proxy connections. It has file, host, cookie, header, and content filtering, and can forward through both socks4 and regular http/https proxies.

Minimalist: Minimalist is a mailing lists manager that is small, fast, and easy to setup and maintain. It supports optional authentication subscribe/unsubscribe requests, global or per list administrators, message archiving, activity logging, lists permissions, and a subscribers thresold per list. It can be configured either on a per-list basis or globally.

Minit: Minit is a replacement for init (but can also be used in parallel) that has process monitoring capabilities and is somewhat similar to daemontools from D. J. Bernstein.

Mirmon: Many project are mirrored worldwide. Mirmon helps in monitoring these mirrors. In a concise graphic format, mirmon shows each site's history of the last two weeks, making it easy to spot stale or dead mirrors. Mirmon quietly probes a subset of the sites in a given list, writes the results in the 'state' file, and generates a Web page with the results

Mod ruby: mod_ruby' embeds the Ruby interpreter into the Apache Web server, allowing Ruby CGI scripts to be executed natively. These scripts will start up much faster than without mod_ruby.

Mod spin: 'mod_spin' is an Apache module that provides a simple template language with data replacement capabilities, persistent application and session tracking, database connection pooling, dynamic linking of applications into Apache as shared libraries, parameters, cookies, and multipart/form data parsing, and a simple API for MVC controller functionality.

ModemManager: ModemManager is a DBus-activated daemon which controls mobile broadband (2G/3G/4G) devices and connections. Whether built-in devices, USB dongles, bluetooth-paired telephones or professional RS232/USB devices with external power supplies, ModemManager is able to prepare and configure the modems and setup connections with them. This package contains shared libraries for applications interfacing with ModemManager.

Moftpd: 'moftpd' is a powerful FTP server supporting IPv6, virtual hosts, fine grained permissions, and much more

Mondo Health Monitor: Mondo is a system health monitor daemon for GNU/Linux, capable of running specific commands whenever alarm conditions get tripped. Mondo can do things like send e-mails and shut your system down if a fan fails, voltage rails start to go haywire, or your system just seems warmer than it should be. It can actually run any command of your choice to handle an alarm condition

Monero Core: Monero Core consists of several applications, including bitmonerod (the daemon used if running a full node, as it maintains the connection to the Monero network) and simplewallet (a Monero account manager application), as well as several other helper applications.

Monfarm: Monfarm is an alarm-enabled monitoring system for server farms. It produces dynamically updated HTML status pages showing the availability of servers. Alarms are generated if servers become unavailable.

MongooseIM: MongooseIM is aimed at large, complex enterprise level projects where real-time communication is critical for business success. It provides high availability, ease of deployment, development and reliability in production. The MongooseIM platform includes server-side components and client libraries. It has also contributed to open source third party XMPP libraries: Smack for Android and XMPP framework for iOS. Built around proven technologies XMPP/Jabber, it adds a simple client/server REST API for front-end and back-end integration.

Mony: 'mony' is an ICMP monitoring tool designed to be very flexible, scalable, and fast. It can be used for monitoring thousands of nodes. It can run either as a tool with an interface like fping (in the foreground, dumping stats to stdout) or as a daemon that monitors network devices and dumps stats continously.

Moodss: Moodss (the Modular Object Oriented Dynamic SpreadSheet) displays data described and updated in modules loaded at startup time or dynamically. Data is displayed in tables, but users can create graphical viewers, summary tables, free text viewers, and threshold entries from table cells. Moodss has full drag'n'drop support in the UI, and comes with numerous modules for system, database, network, and other types of monitoring. New modules can be developed in Tcl, Perl, Python, or C. A monitoring daemon (moomps) for UNIX is included: it activates emails and scripts upon threshold conditions and monitors data over time, via storage in a MySQL or any ODBC compliant database, for post analysis by common software (spreadsheets, for example).

Mpd: Music Player Daemon (MPD) is a server that allows remote access for playing music (MP3, Ogg Vorbis, and Flac) and managing playlists. The design focus is on integrating a computer into a stereo system that provides control for music playback over a local network. Currently, it includes a Web interface (phpMp), a GTK frontend (gtk2mp), a command line tool (mpc), and a dock app(WMmp). Its goals are ease of installation and use, minimal resource requirements, and stability and flexibility.

Msredird: 'msredird' implements the "Telnet Com Port Control Option" protocol RFC 2217 running in server mode. This protocol makes it possible for networked computers to access central pool of modems.

MudPy: The mudpy project aims to create a simple, generic, cross-platform, freely-redistributable MUD core engine which can be easily understood and extended. It has no prerequisite dependencies beyond Python and its built-in modules. All configuration and data are stored in consistently-formatted plain text files for ease of administration.

Mule

Mule stands both for MUlti-Language Extensions, MULtilingual Environment and MULtilingual Enhancement to GNU Emacs. The code was formerly part of NEmacs, a Japanese-only version of Emacs. It was written by a core team of developers of the National Institute of Advanced Industrial Science and Technology (AIST), which is a part of Ministry of Economy, Trade and Industry (METI), of the government of Japan. Mule provided support for a large number of languages, including Chinese, Japanese and Korean, and was integrated into Emacs version 20. Current code includes:

mule-cmds.el, commands for multilingual environment (Mule).
mule-conf.el, configure multilingual environment.
mule-diag.el, show diagnosis of multilingual environment.
mule-util.el, utility functions for multilingual environment.

Also included is an utility to convert multilingual text into standalone PS. MULE is maintained as a part of GNU Emacs.

Multi-Threaded DAAP Daemon: Multi-Threaded DAAP Daemon is used for sharing MP3 files with clients using daap. It includes support for static playlists (.m3u files), dynamic playlists using a script-like language, Web-based administration, and built-in mDNS (rendezvous) advertising using Apple's ASPL mDNS responder.

Munin: 'Munin' gathers and graphs various types of information. You can install a node on the machines in your network, as well as on a central server. The nodes will know how to extract various kinds of information, such as load average and bandwith usage, and will wait for the server to request these values. The output is in HTML. You can be optionally notified if values move outside a specified range.

Mwcollect: 'mwcollect' collects worm-like malware in a non-native environment. The first versions collected binaries for botnet monitoring, and bots are still what it is mostly collecting. Some people consider it a next generation honeypot; however, that comparison often leads to the misunderstanding that computers running mwcollect can actually be infected with the malware, which is not the case.

MyDNS: MyDNS is a free DNS server for *nix. It was implemented from scratch and is designed to serve records directly from an SQL database (currently either MySQL or PostgreSQL). Its primary objectives are stability, security, interoperability, and speed, though not necessarily in that order. MyDNS does not include recursive name service, nor a resolver library. It is primarily designed for organizations with many zones and/or resource records who desire the ability to perform real-time dynamic updates on their DNS data via MySQL.

Myserver: MyServer is a powerful web server designed to be easily run on a personal computer by the average computer user. It is a multithread application and supports HTTP, HTTPS, CGI, ISAPI, WinCGI and FastCGI protocols. You can share files in minutes.

NNCP: NNCP (Node to Node copy) is a collection of utilities simplifying secure store-and-forward files, mail and commands exchanging. This utilities are intended to help build up small size (dozens of nodes) ad-hoc friend-to-friend (F2F) statically routed darknet delay-tolerant networks for fire-and-forget secure reliable files, file requests, Internet mail and commands transmission. All packets are integrity checked, end-to-end encrypted (E2EE), explicitly authenticated by known participants public keys. Onion encryption is applied to relayed packets. Each node acts both as a client and server, can use push and poll behaviour model. Out-of-box offline sneakernet/floppynet, dead drops, sequential and append-only CD-ROM/tape storages, air-gapped computers support. But online TCP daemon with full-duplex resumable data transmission exists.

Nabou: 'nabou' monitors changes to files and directories on your system using MD5 checksums. It can also watch crontabs, suid files, and user accounts for changes. It stores all data in standard dbm databases. 'nabou' is highly configurable; you can exclude files from being checked, configure which file attributes it should look for, use custom checks, and more.

Natlog: Natlog is a utility logging traffic through a firewall that performs source-NATting (a.k.a. POSTROUTING). Firewalls like iptables usually offer POSTROUTING source network address translation facilities changing the source address of a host behind the firewall to the address of the host before the firewall. The standard log facilities provided by iptables do not easily allow us to associate addresses behind the firewall to their source-natted equivalents before the firewall. Natlog was designed to fill in that particular niche. When running natlog, messages are sent to the syslog daemon and/or to the standard output stream showing the essential characteristics of the connection using source natting. Here is an example: from Fri 8 22:30:10:55588 until Fri 8 22:40:43:807100: 192.168.19.72:4467 (via: 129.125.90.132:4467) to 200.49.219.180:443 Logs like these allow system administrators to associate, e.g., a complaint arriving for the firewall's IP address (in the example: 129.125.90.132) with a computer behind the firewall (e.g., 192.168.19.72) that actually was responsible for the complaint. Natlog depends on facilities provided by iptables, but may also generate logs directly using facilities offered by the pcap library. To create the program from its sources, either descend into the natlog directory, or unpack a created archive, cd into its top-level directory and follow the instructions provided in the INSTALL file found there. Alternatively, binary ready-to-install versions of natlog are available in verious GNU/Linux distributions, in particular Debian. See, e.g., https://packages.debian.org/search?keywords=natlog&searchon=names&suite=all&section=all Gitlab's web-pages for natlog are here: https://fbb-git.gitlab.io/natlog/

Nefu: 'nefu' (network fidelity utility) monitors services over the network. It uses a "no false alarms" fault verification algorithm, and understands network dependancies. Natively-monitored protocols include ICMP echo (ping), SSH, IPP, DNS, HTTP, POP, NTP, IMAP, SMTP, and LDAP, as well as having facilities to execute external programs. User access status pages via finger or the Web.

Net-check: The net-check package is a pair of scripts that monitor and report on your internet connectivity. They monitor your internet connection (with user defined packet loss threshold), reconnect after 2 failures, log all up and downtimes, and e-mail the user a monthly status report with downtime recorded and adjusted service fee

Net-snmp: 'net-snmp' provides tools and libraries relating to the Simple Network Management Protocol. The package includes an extensible agent, an SNMP library, tools to request or set information from SNMP agents, tools to generate and handle SNMP traps, and more.

NetMess: NetMess is a peer-to-peer file sharing system. Its advantages over other p2p systems include clone detection and the ability to work through an HTTP proxy and through most firewalls (both inbound and outbound). It is decentralized and does not depend on a master server, so it can run in a LAN environment (useful as an information sharing system for small to middle-sized company). It lets its users search and retrieve documents without having to remember their exact location, and can share all file types (audio, video, archives, etc).

Netalert: 'netalert' checks the availability of network services by initiating cyclic TCP and/or UDP connection attempts. It can also validate received sequences (using extended regular expressions) and even trigger those sequences by sending sequences itself. It will notify the admin by email when a service goes down. The package is easy to setup due to its clean XML-based configuration file.

Newrpms: newrpms scans a directory of packages and finds out which ones are newer than the installed versions. It's especially useful if you're tracking the unstable branch of a distribution.

NewsDeliver: NewsDeliver is a simple but customizable NNTP to email gateway written in Python. When invoked (usually by a cron job), it checks for new messages on newsgroups that the user has marked as "watched" and emails a copy of any new messages to the user.

Newsstar: Newsstar fetches news and posts it to a local news server: INN and sn are supported. The program can make multiple simultaneous connections, not only to one server, but to several, supporting up to 10 "threads". Before fetching each article, it checks that it hasn't already been downloaded by another thread or in a previous session. It can also "pipeline" article requests to make more efficient use of bandwidth.

NextTypes: NextTypes is a standards based information storage, processing and transmission system that integrates the characteristics of other systems such as databases, programming languages, communication protocols, file systems, document managers, operating systems, frameworks, file formats and hardware in a single tightly integrated system using a common data types system. NextTypes is a relational/network/objects/files hybrid database system with high level SQL interface, extensive primitive types list, JSON/JSON-LD/XML/Smile/WebDAV/CalDAV/iCalendar/RSS data access, REST interface, customizable MVC architecture, optimistic concurrency control, HTML5/CSS3/SVG/Javascript responsive graphical interface, multilanguage, UTF-8 encoding, syntax highlighting or WYSIWYG editors, robots.txt and sitemap management, text extraction/fulltext search, document management, virus scanning, DoS/SQL injection/CSRF/XSS protection, passwords/X.509 certificates authentication, logging and backup system.

Free Software Foundation!

Semantic search

Query log

Insignificant memory usage!

Also quite insignificant CPU usage

bustd locks all pages mapped into its address space

Checks for Pressure Stall Information

Navigation menu

Personal tools

Namespaces

Variants

Views

More

Search

Interaction

Navigation

Creation

Print

Tools