On this page we present some tools we developed in the context of our work at bwNET100G+.

Alekto – Zero Trust Network Framework


CPUnetLOG is an open source software that can:

  • Display
  • Log
  • Plot

CPU utilization and network throughput.

 User interface (CPUnetLOG)

The software is developed at the Institute of Telematics of the Karlsruhe Institute of Technology and has a strong focus on scientific reasearch, presentation and publication. It is available under the “BSD 2-Clause License” and is open for contributions.

If you have any questions about the software or if you're interested to contribute to the project, feel free to contact Mario Hock.

Getting the code via git:


git clone https://git.scc.kit.edu/CPUnetLOG/CPUnetLOG.git
git clone https://git.scc.kit.edu/CPUnetLOG/CPUnetPLOT.git

(The first repository holds the live display and logging tool. The plotting tool can be found in the second repository.)

 Easy plotting of the logged data


TCPlog is an open source software that can display, log and live plot miscellaneous TCP socket internals.

 User interface (TCPlog)

TCPlog uses either Linux's “tcp_probe”-Kernel module or data provided by TCPinfo as it's input source. Data of filtered flows can be logged to stdout, into a file or send via socket. TCPlivePLOT uses TCPlog's logging output to visualize live these data.

Getting the code via GIT:

Getting the programs via PyPi:

pip3 install --user tcplog
pip3 install --user tcpliveplot

 TCPlivePLOT: Easy live plotting of the data beeing logged.

Anonymize IPs

Download: anonymize-ips.pl

  USAGE: ./anonymize-ips.pl -i <file> [-o <file>] [--hash|--subnet]             

  This script can be used to replace IP addresses in any input textfile by      
  static string values or hashes of the addresses. In the current version the   
  script expects the IP addresses the be placed between double qotes (").       


    -i       defines the input file including the IP addresses you want to      

    -o       defines an optional output filename, where the anonymized output   
             will be written to. By default the output will be written to       

    --hash   IP addresses will be hashed with sha512_base instead of being      
             replaced by a static string value.                                 

    --subnet the last byte of an address (v4) or the interface identifier (v6)  
             will be replaced with XX.  
en/tools.txt · Last modified: 2020/09/09 11:02 (external edit)