Web site: (not active)
Origin: Unknown
Category: Forensics
Desktop environment: Fluxbox
Architecture: x86
Based on: Knoppix
Media: Live CD
The last version | Released: 1.2 | May 9, 2007

Knoppix-NSM – a modified version of the Knoppix LiveCD, focused on network security monitoring.

Knoppix-NSM is not a preventative tool and does not focus on vulnerabilities.
It contains many very useful tools for detective network analysis, such as:
– Sguil to detect this network activity
– Basic Analysis and Security Engine (BASE) NSM for network monitoring and showing the port scan as well
– the following scans can by ran: FIN, XMAS, NULL, Operational
– Ntop to view statistical network data using – this can alert you to abnormal network such as 95% of all traffic being UDP packets.

The system works in a live session from a CD without installing to hard drive, but can be installed to a hard disk too.


Knoppix-NSM 1.2 i386 383MB.iso
md5sum: 04aca38ccb6f010577e163836515ac95


Posted in Linux Tagged with: , , , , , , , , ,

Leave a Reply

Your email address will not be published. Required fields are marked *


Recent Comments