Projects tagged ‘log’ and ‘security’

Advanced Web Statistics (AWStats) is a free powerful Web server logfile analyzer (Perl script) that shows you all your Web statistics including visits, unique visitors, pages, hits, rush hours, search engines, keywords used to find your site, robots ... [More] , broken links, and more. It works with both IIS 5.0+ and Apache Web server log files as a CGI and/or from the command line. It also supports multiple languages including English, French, Dutch, Spanish, Italian, German, Polish, and Greek. [Less]

eZ components is an enterprise ready general purpose PHP components library by eZ systems. As a collection of high quality independent building blocks for PHP application development eZ components will both speed up development and reduce risks. ... [More] An application can use one or more components effortlessly as they all adhere to the same naming conventions and follow the same structure. [Less]

DenySSH monitors the auth log of a BSD system for failed SSH login attempts and adds repeat attackers to a Packet Filter table, allowing you to define PF rules to block the attacking hosts or redirect them to a honeypot for your amusement.

MailWatch for MailScanner is a web-based front-end to MailScanner written in PHP, MySQL and JpGraph. It comes with a CustomConfig module for MailScanner which causes MailScanner to log all message data (excluding body text) to a MySQL database which is then queried by MailWatch for reporting and statistics.

Logcheck is a simple utility which is designed to allow a system administrator to view the logfiles which are produced upon hosts under their control. It does this by mailing summaries of the logfiles to them, after first filtering out "normal" ... [More] entries. Normal entries are entries which match one of the many included regular expression files contain in the database. [Less]

Bad Behavior is a PHP-based solution for blocking link spam and the robots which deliver it. Bad Behavior complements other link spam solutions by acting as a gatekeeper, preventing spammers from ever delivering their junk, and in many cases, from ... [More] ever reading your site in the first place. This keeps your site’s load down, makes your site logs cleaner, and can help prevent denial of service conditions caused by spammers. Instead of merely looking at the content of potential spam, Bad Behavior analyzes the delivery method as well as the software the spammer is using. [Less]

OSSEC is an Open Source Host-based Intrusion Detection System. It performs log analysis, integrity checking, Windows registry monitoring, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.

Lire is hands down the most versatile log analysis software to keep track of in an active network than just webservers available today. Lire not only keeps you informed about your HTTP, FTP, and mail traffic, it also reports on your firewalls, your ... [More] print servers, and your DNS activity. It is GPL'ed Free Software (and Open Source), built around the idea of extendibility. Its xml-driven reporting engine can theoretically parse any kind of log, given that a service driver is written to convert the raw log into a Lire DLF (Distilled Log Format) file. This means that Lire is also a long-term solution: as new network services come into vogue, Lire will be there to parse and distill their activity for you. [Less]

Sawmill is a log analysis tool which can be used to analyze Web site traffic, proxy usage, ftp usage, and much more. Major features include a persistent database for long-term tracking of statistics, hierarchical data mining features, and many security features appropriate for use in a multi-user environment.

FLAG (Forensic and Log Analysis GUI) is an advanced forensic tool for the analysis of large volumes of log files and forensic investigations. PyFlag features a rich FeatureList which include the ability to load many different log file formats ... [More] , Perform forensic analysis of disks and images. PyFlag can also analyse network traffic as obtained via tcpdump quickly and efficiently. Since PyFLAG is web based, it is able to be deployed on a central server and shared with a number of users at the same time. Data is loaded into cases which keeps information separated. PyFlag is available under the terms of the GPL for anyone to use, modify and improve. [Less]