Bfs is a variant of the UNIX find command that operates breadth-first rather than depth-first. It is otherwise compatible with many versions of find, including POSIX, GNU, and *BSD find.

libpcap is an interface for user-level packet capture. It provides a portable framework for low-level network monitoring. Applications include network statistics collection, security monitoring, network debugging, etc.

Netcat is a simple Unix utility which reads and writes data across network connections using TCP or UDP protocol. It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts. At the same time it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities.

This package contains the OpenBSD rewrite of netcat, including support for IPv6, proxies, and Unix sockets.

wpa_supplicant is a WPA Supplicant with support for WPA and WPA2 (IEEE 802.11i / RSN). Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the WLAN driver.

This package provides the wpa_supplicant daemon and the wpa_cli command.

This is htop, an interactive process viewer. It is a text-mode application (for console or X terminals) and requires ncurses.

This package provides a daemon for checking running and not running processes. It reads the /proc directory every n seconds and does a POSIX regexp on the process names. The daemon runs a user-provided script when it detects a program in the running processes, or an alternate script if it doesn't detect the program. The daemon can only be called by the root user, but can use sudo -u user in the process called if needed.

Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system firewall rules to reject new connections from those IP addresses, for a configurable amount of time. Fail2Ban comes out-of-the-box ready to read many standard log files, such as those for sshd and Apache, and is easily configured to read any log file of your choosing, for any error you wish.

Though Fail2Ban is able to reduce the rate of incorrect authentication attempts, it cannot eliminate the risk presented by weak authentication. Set up services to use only two factor, or public/private authentication mechanisms if you really want to protect services.

Atop is an ASCII full-screen performance monitor for Linux that is capable of reporting the activity of all processes (even processes have finished during the monitoring interval), daily logging of system and process activity for long-term analysis, highlighting overloaded system resources by using colors, etc. At regular intervals, it shows system-level activity related to the CPU, memory, swap, disks (including LVM) and network layers, and for every process (and thread) it shows e.g. the CPU utilization, memory growth, disk utilization, priority, username, state, and exit code.

This package provides an on demand system DBus service. It allows callers to configure network authentication and domain membership in a standard way. Realmd discovers information about the domain or realm automatically and does not require complicated configuration in order to join a domain or realm. Dbus system service that manages discovery and enrollment in realms/domains like Active Directory or IPA.

Provides a DHCP and a DHCPv6 client. Additionally, dhcpcd is also an IPv4LL (aka ZeroConf) client. In layperson's terms, dhcpcd runs on your machine and silently configures your computer to work on the attached networks without trouble and mostly without configuration.

A daemon that monitors directories for events, such as creating, deleting or modifying files. It can monitor different sets of directories for different events. When an event is detected, direvent calls a specified external program with information about the event, such as the location within the file system where it occurred. Thus, "direvent" provides an easy way to react immediately if given files undergo changes, for example, to track changes in important system configuration files.

Autojump provides a faster way to navigate your file system, with a "cd command that learns". It works by maintaining a database of the directories you use the most from the command line and allows you to "jump" to frequently used directories by typing only a small pattern.

Netcat is a featured networking utility which reads and writes data across network connections, using the TCP/IP protocol. It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities.

GNU Radius is a server for remote user authentication and accounting. It is generally useful for networks that require a centralized authentication and accounting services for its workstations. Authentication can be performed in a variety of ways, such as via /etc/passwd or credentials stored in an SQL database.

Small console getty that is started on the Linux text console, asks for a login name and then transfers over to login. It is extended to allow automatic login and starting any app.

Dstat is a versatile replacement for vmstat, iostat, netstat, and ifstat. Dstat overcomes some of their limitations and adds some extra features, more counters and flexibility. Dstat is handy for monitoring systems during performance tuning tests, benchmarks or troubleshooting.

Dstat allows you to view all of your system resources in real-time, you can, e.g., compare disk utilization in combination with interrupts from your IDE controller, or compare the network bandwidth numbers directly with the disk throughput (in the same interval).

wlgreet provides a greetd greeter that runs on a Wayland compositor such as sway. It is implemented with pure Wayland APIs, so it does not depend on a GUI toolkit.

This is the user-space component to the Linux auditing system, which allows logging of system calls made by user-land processes. auditd is responsible for writing audit records to the disk. Viewing the logs is done with the ausearch or aureport utilities. Configuring the audit rules is done with the auditctl utility.

This package provides a program that collects various performance measurement data like CPU, memory, disk and network performance numbers.

Inxi is a system information script that can display various things about your hardware and software to users in an IRC chatroom or support forum. It runs with the /exec command in most IRC clients.

Resource monitor that shows usage and stats for processor, memory, disks, network and processes. It's a Python port and continuation of bashtop.

pscircle visualizes Linux processes in the form of a radial tree.

GNU pies is a program that supervises the invocation and execution of other programs. It reads the list of programs to be started from its configuration file, executes them, and then monitors their status, re-executing them as necessary.

Munge is an authentication service for creating and validating credentials. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.