Open Source Log Analysis Software

FW1-Loggrabber is a command-line tool to grab logfiles from Checkpoint FW-1 remotely using Checkpoints LEA (Log Export Api), which is one part of Checkpoints OPSEC API.

AccounteX is an IP accounting system based on the IP Stat program. It has many exciting features like fully customizable web traffic accounting and user access control by many different values. information service and web statistics and administration.

BCLF is the Binary Common Log Format, a fast, platform independent, streamable, compact logging format that resembles the Extended CLF logging format in content. The project goal is to make an Apache module and enhance the format without giving up speed.

Caudium WebServer is a single process multi-threaded webserver. It has a built-in pre-processing language and includes an easy to use web-based configuration interface.

A Tool used in conjunction with glftpd to dynamically create reports on users groups. And Allow the user to access those reports through the web, irc, and glftpd itself

A visual amateur radio logging application written in PHP and MySQL, that allows amateur radio stations to manage their QSO logbook either by direct entry in to a webpage, or bulk upload the ham radio deluxe database, displaying results in google maps

Impost is a network security auditing tool designed to analyze the forensics behind protocol exploitation.

Java library and command line application to generate usage reports in various formats from processed W3C web server log files.

Jacclog is a modular open source access logs analytics system written in Java.

This application allows you to capture the logging messages about network activity from your Linksys cable/DSL modem routers and store it in a database. The beginings of a PHP web based front end is also included as a separate module.

This is a program that watches your system log files, looking for hack attempts. It instanty reacts to potential security breaches by (for instance) adding firewall rules to cut off the attacker.

Lire is a pluggable log analyzer, supporting HTTP, email, DNS, FTP, firewall and print services. Output generated can be txt, (X)HTML, PDF, RTF, and DocBook. The latter four support graphics. For news/support visit the project homepage.

A code toolkit for collecting usability data on the web. Tools range from an entirely client side solution for measuring scrolling and render time to a hybrid solution logging user activity every 200 milliseonds. Currently IE only.

Internet Control Firewall Intrusion Detection and Logger for Inbound and Outbound Traffic. Watches Files and Directories, Drive and Memory Protection.

NetMate Meter is a flexible and extensible tool for network measurement. It can be used for accounting, delay/loss measurement, packet capturing. It supports dynamic loadable packet processing and data export modules and a flexible packet classifier.

ATTENTION: Snare Lite is unsupported legacy software. While it will remain a part of the SourceForge community, it is no longer secure and compliant. For up to date Snare software check out Snare Enterprise. https://www.snaresolutions.com/try-snare-for-free/ Snare Enterprise was created to keep up with the fast paced security software market. It started with the desire to create premium logging and SIEM tools that were agnostic by nature so they could be used to boost any SIEM architecture regardless of third party developers. In fact, the agnostic nature allows it to bridge gaps between multiple SIEM implementations across business units. For more on use cases, check out the Intersect Alliance website. https://www.snaresolutions.com/ Snare Enterprise’s premium features include: - Regulatory Compliance - TLS Encryption - Log Simulcasting - TCP – Guaranteed Log Delivery - USB Device Monitoring - And more! For updates follow us on social media!

Squeezer is a multi-dimensional logfile analyzer for Squid web cache server. It measures transfer speed from Squid, source servers and other caches and gives an information useful for tuning Squid and web cache hierarchy or mesh.

SquiDeral - manipulating the cache usage of Your network.

StataCaster is a series of PERL scripts used to email sendmail statistics to you. StataCaster can send you Daily, weekly and monthly statistics. StataCaster also maintains an archive of past stats, so You can see your past performance.

WTIQ provides detailed information about web activity on web sites which have been modified to include WTIQ monitoring tags in their pages. WTIQ is used by WebtraffIQ (http://www.webtraffiq.com) to provide detailed web traffic information commercially.

This RRDTool Framework provides a central HTTP-based service for import into standard RRD DBs and graph generation. A lightweight, easily extendable agent for the data sources is pushing updates with minimal resource consumption on the master service.

Ztats is a overall info tool for an Halflife server. (it may expand to other server types in the future). it's intended for wesite admins/game admins who want to include all sorts of server info in their site. main features : - live server monitor

deStats is a rather small, fast, and cool IRC Logfile stats generation program. It will eventually become an open source alternative to the existing ones such as mIRCStats, and IRCStats.

ISPMan is a system to design massive ISPs using LDAP as the backend. ISPMan provides a web front end and a command line interface to create virtual domains and manages users, dns information, email infos and httpd setup data for these vhosts.

myNetWatchman Perl Agent is a program that is designed to capture rejected packet information from various firewall logs and forward this attack information to central analysis servers at myNetWatchman.com.