Open Source Log Analysis Software

OSSIM, AlienVault’s Open Source Security Information and Event Management (SIEM) product, provides event collection, normalization and correlation. For more advanced functionality, AlienVault Unified Security Management (USM) builds on OSSIM with these additional capabilities: * Log management * Advanced threat detection with a continuously updated library of pre-built correlation rules * Actionable threat intelligence updates from AlienVault Labs Security Research Team * Rich analytics dashboards and data visualization

The pimped Apache status makes the Apache server status readable, sortable and searchable. The pimped Apache status can merge the status of several servers that opens the possibility to identify the troubleshooter even in a loadbalanced website. The webbased tool offers a multilanguage, skinable interface with a built-in updater. In several views you see most requested pages, vhosts, used methods, IPs that make the most requests and more. All views are sortable tables you can filter by a keyword and are available as API Request too to get its data as CSV, XML or JSON. Compatible with PHP 7+8 (and should run on PHP 5.x - but is not supported).

ttyrpld is a multi-OS kernel-level TTY keylogger and screenlogger with (a)synchronous replay support. It runs on Linux, Solaris, FreeBSD, NetBSD and OpenBSD.

AutoIndex is a PHP script that makes a table that lists the files in a directory, and lets users access the files and subdirectories. It includes searching, icons for each file type, an admin panel, uploads, access logging, file descriptions, and more.

ISPMan is a system to design massive ISPs using LDAP as the backend. ISPMan provides a web front end and a command line interface to create virtual domains and manages users, dns information, email infos and httpd setup data for these vhosts.

It's a powerfull environment to easy administrate a web-page including many tools like visitor-statistics, forum- and guestbook management... Anything you need for your homepage in one tool.

Get and display the traffic counter of a Fritz!Box 7270 (or similar) in a human readable form on local host. The telnet daemon has to be enabled on the FritzBox to download the data file from the AVM router to local host.

Java and ColdFusion libraries to lookup country code and language from IP address. It uses a local copy of the WHOIS database to perform fast, accurate lookups of country codes. Useful for log analysis, internationalization, geolocation, etc..

Lighweight Universal Log or Network Analyzer is a Open Source project (written in Perl) with the intention of creating a logsystem which is capable of creating statistics out of the files.

The logjana program is a log program for the jana proxy server V2. It splits the main logfile "proxy.log" in timed files. The main logfile "proxy.log" will not be change. For questions send a mail at michael.wiechert(at)goo

M-ICE is a modular hostbased intrusion detection framework. It is used as middleware to close the gap between IDS research and IDS development. M-ICE consists of various parts that can be connected together by using network-or interprocess-communication

ncLog is the only tool to save the information in the console(.log) (=chat and system messages) not only permanently, but also in a structured way, so you can examine your daily achievements (such as your daily income/spendings).

Internet Control Firewall Intrusion Detection and Logger for Inbound and Outbound Traffic. Watches Files and Directories, Drive and Memory Protection.

Logs Analyzer, Alerter & Reporter with a Web Interface

ppplog keeps track of your ppp online session costs. It detects online/offline states and automatically calculates costs according to your local phone company. Simplicity and flexibility was key in development.

TCPIPTraff simply monitors the traffic of a network interface and generates a HTML output. You need perl, perl-DBI, mysql, apache, php

TraffStats: network Traffic Statistic - is a monitoring and traffic analysis software, using SNMP to collect data from any enabled device. - has the ability to generate graphs (using jpgraph) with the option to compare and sum up different devices.

This Utility sends site-requests. If the Server is not responding in the given time (loss) an entry is made to a failure-protokol-file. Overview and list of offlinetimes. Edit-function. Graphical view. PDF-Output. Supports Language-Files.

Complete real-time log reporting solution that takes advantage of XML. Logs are translated to XML and cataloged, allowing a report to be run and viewed in real-time. Assembled in a modular format it is capable of advanced customization.

This RRDTool Framework provides a central HTTP-based service for import into standard RRD DBs and graph generation. A lightweight, easily extendable agent for the data sources is pushing updates with minimal resource consumption on the master service.

chill is a heavy-module-based web-application with a core supporting many features. writing own modules for... everything. modules for webmail, firewall/router-administration, server-administration are planned natively.

fwlogwatch is an open source firewall/IDS log analyzer and interactive realtime attack detection and response tool

packet analyser for tcpdump-output designed for KDE

Netflow V5 capture and import mysql ANSI C

phpLogFacility is a log class for PHP (like log4j for java or the dead log4php projects here), which enables you to use an easy to use logging mechanism inside your console or web script without the need of ugly debug screen output.