hosts3d(1) - Linux man page

Name

hosts3d - 3D real-time network monitor

Synopsis

hosts3d [-f]

Description

Hosts3D is a 3D real-time network monitor, displaying hosts and packet traffic. Features include support for multiple sensors, analysis of packets to gather hostnames and services, configurable layout of subnetworks, recording/replaying of packet traffic, and the ability to filter packets by hosts, protocol or port.

-f: Display full screen.

Press H key in Hosts3D to show help.

Data Files

Created in directory ".hosts3d/".

controls.txt: Controls
settings-hsd: Settings
0network.hnl: Network Layout On-Exit
1network.hnl: Network Layout 1
2network.hnl: Network Layout 2
3network.hnl: Network Layout 3
4network.hnl: Network Layout 4
netpos.txt: CIDR Notation Net Position/Colour
traffic.hpt: Packet Traffic Record
tmp-hinfo-hsd: Temporary Information
tmp-netpos-hsd: Temporary Net Positions
tmp-flist-hsd: Temporary Working Directory File List

Net Positions

If a host is not a member of any net position entries, it is placed in the Grey Zone. If a host is a member of multiple net position entries, the first entry is used. Line format for net position entries is "pos net x-position y-position z-position colour",
eg. "pos 123.123.123.123/32 10 0 -10 green".

Positions:

Grey/Red: positive x-position
Blue/Green: negative x-position
Up: positive y-position
Down: negative y-position
Grey/Blue: positive z-position
Red/Green: negative z-position

Colours:

none (where multiple colours are used), default (grey), orange, yellow, fluro, green, mint, aqua, blue, purple, violet and hold (place hosts in same position).

START/STOP LOCAL hsen

If sudo is required to start/stop a local hsen, the user starting Hosts3D must be in /etc/sudoers. The default sudo command to start/stop a local hsen may prompt via terminal for a password. The default command to stop a local hsen uses "killall hsen", which will kill all hsen processes.

Notes

Firewall configuration: hsen talks to Hosts3D via UDP port 10111. If hsen is running and Hosts3D is not, ICMP Port Unreachable (UDP port 10111) may be generated. Hosts3D logs to syslog, check when troubleshooting. By default hosts are added from packet source IP address, option Add Dests will also add from destination IP address. If show broadcasts is off, a (B) indicates broadcast present. Anomalies are a new host or host service. Using the menu options to move/arrange a few thousand hosts may take a few minutes. Deleting hosts, using the menu options to move/arrange hosts, or clearing/restoring a net layout may affect packet recording. Clicking a multiple host object will cycle through selecting hosts within. Data files from 32-bit version are incompatible with 64-bit version and vice versa.

Author

Written by Del Castle.

Reporting Bugs

Report bugs to <hosts3d@gmail.com>.

Copyright

Copyright © 2006-2010 Del Castle
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.