 | This article includes a list ofgeneral references, butit lacks sufficient correspondinginline citations. Please help toimprove this article byintroducing more precise citations.(May 2024) (Learn how and when to remove this message) |
| Network Security Toolkit | |
|---|---|
 NST WUI: Multi-Tap Network Packet Capture | |
| Developers | Ronald W. Henderson Paul Blankenbaker |
| Initial release | 2003, 22–23 years ago |
| Stable release | 42-14476 / June 1, 2025; 8 months ago (2025-06-01) |
| Written in | HTML,JavaScript,AJAX,JSON,Bash,PHP,Java,Perl,Python,XML,XSLT,SVG,C,C++,Expect,Unix Utilities |
| Operating system | Linux |
| License | GNU General Public License 2.0 (GPLv2) |
| Website | networksecuritytoolkit |
Network Security Toolkit (NST) is aLinux-based LiveDVD/USB Flash Drive that provides a set offree and open-sourcecomputer security andnetworking tools to perform routine security and networking diagnostic and monitoring tasks. The distribution can be used as a network security analysis, validation and monitoring tool on servers hostingvirtual machines. The majority of tools published in the article "Top 125 security tools" byInsecure.org are available in the toolkit. NST has package management capabilities similar toFedora and maintains its own repository of additional packages.
Many tasks that can be performed within NST are available through aweb interface called NST WUI.[1] Among the tools that can be used through this interface arenmap with the vizualization tool ZenMap,ntop, a Network Interface Bandwidth Monitor, a Network Segment ARP Scanner, a session manager forVNC, aminicom-based terminal server,serial port monitoring, andWPAPSK management.
Other features include visualization ofntopng,ntop,wireshark,traceroute,NetFlow andkismet data bygeolocating the host addresses, IPv4 Address conversation,traceroute data andwireless access points and displaying them viaGoogle Earth or aMercator World Map bit image, a browser-based packet capture and protocol analysis system capable of monitoring up to fournetwork interfaces usingWireshark, as well as aSnort-basedintrusion detection system with a "collector" backend that stores incidents in aMySQL database.[2] For web developers, there is also aJavaScript console with a built-inobject library with functions that aid the development ofdynamic web pages.
The following examplentop host geolocation images were generated by NST.
The following image depicts theinteractive dynamicSVG/AJAX enabled Network Interface Bandwidth Monitor which is integrated into the NST WUI. Also shown is aRuler Measurement tool overlay to perform time and bandwidth rate analysis.
