Open Source C Log Analysis Software for Mac

OSSIM, AlienVault’s Open Source Security Information and Event Management (SIEM) product, provides event collection, normalization and correlation. For more advanced functionality, AlienVault Unified Security Management (USM) builds on OSSIM with these additional capabilities: * Log management * Advanced threat detection with a continuously updated library of pre-built correlation rules * Actionable threat intelligence updates from AlienVault Labs Security Research Team * Rich analytics dashboards and data visualization

this tool tries to repair your broken pcap and pcapng files by fixing the global header respectively packet blocks and recovering the packets by searching und guessing the packet headers or blocks

This is dhcpd-pools ISC dhcp shared network and pool range usage analysis. Purpose of command is to count usage ratio of each IP range and shared network pool which ISC dhcpd is in control of. Users of the command are most likely ISPs and other organizations that have large IP space. Program is written C. Design goal is to get analysis done quickly where there is lots of data. On cheap laptop the speed of analysis is roughly 100k leases per second. Number of ranges, or shared networks, does not make any significant difference in getting analysis done.

IPCAD runs captures traffic on the specified interfaces (BPF, PCAP, divert, tee, ULOG, IPQ), and records the traffic for later retrieval and analysis. Traffic exported via RSH or NetFlow.

Caudium WebServer is a single process multi-threaded webserver. It has a built-in pre-processing language and includes an easy to use web-based configuration interface.

The Mac OS X Port of analog which has been specially rewritten into ObjC code to take advantage of Cocoa. The rewrite will also incorporate new features not found in the console version. Includes a graphical interface, support for XML property lists. .

LogToMysql: Simple programs to log Apache access and errors to a MySQL database using the piped log mechanism.

META is a decision making software which aims are to track computer attackers, computer attacks and to help investigators finding useful elements.

A number of tools to enhance management/coding of NFR (http://www.nfr.net) IDA, and various other admin tools that can be used for both NFR and hand coding other appliance scripts.

py-rrdtool is a Python module provides an interface to RRDTool, the well known graphing/logging tool.

Shadow Watcher is a Peer to Peer log sharing tool for the security analyst. Consider it a "community watch" program which allows you to keep your system secure from the threats on the internet and help others do the same.

This project is an attempt to redesign the snort database schema and to provide a new analysis frontend and associated tools.

WWW Counter is a configurable, extensible hit-counter for World Wide Web pages which can be used either as a CGI (embedded in your site) or as a standard UNIX console application (support for ncurses is planned).

Complete real-time log reporting solution that takes advantage of XML. Logs are translated to XML and cataloged, allowing a report to be run and viewed in real-time. Assembled in a modular format it is capable of advanced customization.

Small utility written in C allowing easy access to Apache mod_log_sql generated logs for the purpose of log analyzers such as webalizer. Takes any or none of parameters virtual host, month, and year to generate Common Log Format dump to STDOUT.