Packet2sql will convert any text file/log file which contains ipchains packet logs into a stream of SQL inserts which can be used as the base for a firewall-analyzing database application.
A Tool used in conjunction with glftpd to dynamically create reports on users groups. And Allow the user to access those reports through the web, irc, and glftpd itself
mrtg-eth is a perl script which provides a probe for the Multi Router Traffic Grapher to print statistics for network devices which do not support the SNMP protocol. It reads if-stats from /proc/net/dev and generates an output suitable for MRTG.
Loghog was designed to take a proactive stance on snort output. It supports multilog processing and is optimized for high volume traffic. LogHog responds to events by conducting actions such as email and blocking
This project contains PHP code and classes to pull NTOP Statistics out of a mySQL DB... Info such as host name, IP addresses, client ports, TCP Sessions, etc... can be reported on. Other reports are easy to add on.
aWebVisit analyses web logfiles for visit information like: entry/transit/exit points, internal links followed, length of visit and time spent.
aWebVisit-Map then allows you to examine the links followed by your visitors to and from each web page...
A number of tools to enhance management/coding of NFR (http://www.nfr.net) IDA, and various other admin tools that can be used for both NFR and hand coding other appliance scripts.
wlog2analyze is a detailed weblog statistics tool. This free tool generates detailed web server access statistics. This wlog2analyze is a freestanding c++ program.
Esprad is a radius' logs analysis tool. It consists of some perl scripts which read the radius' logs data, data which previously has been inserted in a MySQL database.
WWW Counter is a configurable, extensible hit-counter for World Wide Web pages which can be used either as a CGI (embedded in your site) or as a standard UNIX console application (support for ncurses is planned).
Multi-threaded host name and technical contact lookup tool.
Reads a list of counted IP addresses (as outputted by uniq -c) from stdin or a file. Resolves their hostnames and (whois) technical contacts. Writes info to stdout.
AVirCAP is a system for manual and / or automated detection of CodeRed and Nimda type of hack attempts and virtually all other kinds of "logable" intrusion attempts. It can work stand alone or together with other additional AVirCAP machines in the LAN/W
PHP packet2sql is a spawn of xant's packet2sql program. This program provides a PHP frontend to packet2sql and also enables packet2sql to work with both iptables and ipchains network filters (instead of just ipchains).
A work-around for a "bug" in NetIQ's WebTrends Log Analyzer product which makes Log Analyzer unable to process multiple log files for overlapping periods of time.
Simply specify a list of all your log files and the Web Log Trends Analyzer will consolid
A web based system for reporting on web server log files.
Using Postgres DB
Java servlets
Uses a web server and Java runner of your choosing. (Originally Written for Apache / Servletexec)
Allows custom reports.
Timing of reports and
Find out where your website visitors are from: generates statistics on hits per top level domain (e.g. .com, .org, .uk, .se, .fr). Currently works with apache log format, but can easily be extended to understand other formats. Written in vanilla Python.
The port scan plug in for snort, or just portscan for short is intended to be used in conjunction with snort and logcheck. The tool will allow you to monitor your snort log file and then do port scans based upon certain keywords.