Open Source Linux Log Analysis Software - Page 18

A PHP application to search for matching strings in log files. It was mainly designed for usage in a syslog server environment with big log files, where you cannot log to databases due to the size, but to plain text files which will be searched.

csvplus is a collection of Perl-based utilities for querying csv files.

d3vscan is a simple yet powerful network and Bluetooth scanner which is based on PyGTK.

deStats is a rather small, fast, and cool IRC Logfile stats generation program. It will eventually become an open source alternative to the existing ones such as mIRCStats, and IRCStats.

devialog is a behavior/anomaly-based syslog intrusion detection system which detects unknown attacks via anomalies in syslog. It can generate signatures for ease of management, act upon anomalies in a predefined fashion or perform as a standard log parser

A group of tools to analyze logfiles for qmail, tinydns, dnscache, rbldns, axfrdns and publicfile.

Find out where your website visitors are from: generates statistics on hits per top level domain (e.g. .com, .org, .uk, .se, .fr). Currently works with apache log format, but can easily be extended to understand other formats. Written in vanilla Python.

dynamic server access control provides: ip blocking and access monitoring, server environment information, server load limit blocking, network diagnostic tools (ping, nmap, dnslookup), search engine optimization, searchbot monitoring and more...

PHP-script, which created for displaying eggdrop (http://www.eggheads.org) channel logs in "user-friendly-highlighted" format for viewing by any browser.

Program do przegladania historii tworzonej przez ekg. Wykorzystuje ncurses i jest tylko dla true grim -(

esweep is a scriptable audio measurement program which features various signals and signal processing functions. Its main purpose is the measurement of speakers.

exim2awstats is a PHP script that can translate the log files from the Exim MTA (http://exim.org) into a format that can be used by the log analyzer AWStats (http://awstats.sourceforge.net).

This program сonstantly reads the file(like "tail -f") and сompares every line with expression in file and executing some actions.

FastStats is a c-based replacement for HalfStats (http://www.halfstats.com/), a Half-Life log parser and reporting tool.

Fluent Bit is a super-fast, lightweight, and highly scalable logging and metrics processor and forwarder. It is the preferred choice for cloud and containerized environments. A robust, lightweight, and portable architecture for high throughput with low CPU and memory usage from any data source to any destination. Proven across distributed cloud and container environments. Highly available with I/O handlers to store data for disaster recovery. Granular management of data parsing and routing. Filtering and enrichment to optimize security and minimize cost. The lightweight, asynchronous design optimizes resource usage: CPU, memory, disk I/O, network. No more OOM errors! Integration with all your technology, cloud-native services, containers, streaming processors, and data backends. Fully event-driven design leverages the operating system API for performance and reliability. All operations to collect and deliver data are asynchronous.

frangen's misc projects

fwblocker is a script used to parse syslog files for SSH, pure-ftpd and iptables entries. It will generate statistics but it's main feature is to lock out IP addresses that used a wrong username/password to log into your SSH or FTP Server.

fwgraph is an attempt to characterize and present network traffic including network devices, QoS, and iptables under Linux.

fwlogwatch is an open source firewall/IDS log analyzer and interactive realtime attack detection and response tool

Universal IP-traffic collector. Can gather data from Cisco IP Accounting / ipcad, Mikrotik, NSG, Revolution routers.

A silly thing that shelled out to 'whois' and parsed the output looking for information about country of origin. Slow, inaccurate, buggy, and misguided. What you probably really want is some sort of geolocation tool, like http://www.maxmind.com/en/geolocation_landing.

Real-time stats and ranking for Half-Life2. Hlstats uses a perl demon to parse the logs from hl2. The data is stored in a mysql Database and has a php fronted.

System for Web usage mining and data warehouse: it allows the discovery of knowledge from data (KDD) regarding users' usage on the Web (such as unique visitors, sessions, transactions) and organise it in a RDBMS (currently PostgreSQL). Written in C++.

A parser that matches httpd access/error logs entries, recognizes spoiled accesses and split entries by date filter and good/bad accesses. Also feeds red and black lists to deny access. In/out paths and file names and spoiled URI can be configured.

huPPPcol logs the start and end of a pppd (modem, isdn, pppoe dsl) session, and contains a program to analize the data. It was first developed to meet the hungarian telco standards, now it can be configured to other telcos as well. soon here...