Network Security Toolkit 2.11.0 / 1 DVD
[NST004]

Network Security Toolkit (NST) is a bootable live CD based on Fedora Core.

The toolkit was designed to provide easy access to best-of-breed open source network security applications and should run on most x86 platforms. The main intent of developing this toolkit was to provide the network security administrator with a comprehensive set of open source network security tools. What we find rather fascinating with NST is that we can transform most x86 systems (Pentium II and above) into a system designed for network traffic analysis, intrusion detection, network packet generation, wireless network monitoring, a virtual system service server, or a sophisticated network/host scanner.

This release is based on Fedora 8 using the Linux Kernel: "2.6.30.5". Here are some of the highlights for this release: 
 

• The entire NST distribution is RPM based and an NST system can be maintained using reduntant RPM repositories.
• NST is now extensible. Add new applications with YUM install.
• "NST Live" allows for read/write rootfs file system access so that new applications can be installed even though it was booted from a DVD device.
• "NST Live" can be installed to a USB device for creation of a "NST Live USB Disk". One can then boot the "NST Live USB Disk" from a system capable of booting from USB devices.
• An "NST Live USB Disk" may contain data persistence allowing session information to be maintained across system reboots and/or system moves.
• For systems that lack a DVD device or can not boot from USB devices, the following solution was created for installation of NST to the system hard disk. The "NST Live" distribution is too big to fit on a CD. An "NST Minimal" ISO is provided and was designed to fit on CD media. One can boot the "NST Minimal" ISO, perform a hard disk installation using the NST script: "nstliveinst" and then YUM install the "nst-live" RPM package to completely build out the full NST distribution.
• A new NST script: "nsttraceroute" has been created that Geocodes output from the traceroute utility in KML format for rendering with Google Earth.
• Added 2 network content capture applications: "driftnet" and "tcpxtract". Driftnet is used to capture and display graphic images (i.e., GIF, JPEG and PNG). TCPxTract is used to capture complete documents including PDF or Microsoft Word docs.
• The Multi-Tap Network Packet Capture page has been enhanced with the integration of ngrep and dsniff.
• Many new applications have been added to this distribution release. Previous existing networking and security applications have been updated to their latest revision.