netkraken | network analyzer

tl;dr

records network connections of a bunch of hosts, continuously
aggregates connection data: minutes, hours, days
analyzes and visualizes connection data
a screencast

Features

connection recorder (aka minion) compatible with python 2.6/2.7/3.3/3.4/pypy
aggregation runs on minion, scales well
communication over ssh
multi-dimensional analyzes, configurable via url

Some Examples of the Netkraken Analyzer

function group level (similar hosts grouped together)

Note: These examples are based on anonymized data of a real network: 500 function groups, 3.000 connections, 700kB plain data

small multiples
single hives for selected protocols: http, https, ssh, ldaps, mysql
in- and outbound connections of selected function groups:
a build server (with lots of http(s) connections), a jump host (crowded with ssh sessions), a rather boring host

host level (all individual hosts)

Note: These examples are based on anonymized data of a real network: 1.300 nodes, 10.000 connections, 3.000kB plain data

small multiples
single hives: http protocol, https protocol, ssh protocol, ldaps protocol, mysql protocol