Open Source PHP Log Analysis Software

OSSIM, AlienVault’s Open Source Security Information and Event Management (SIEM) product, provides event collection, normalization and correlation. For more advanced functionality, AlienVault Unified Security Management (USM) builds on OSSIM with these additional capabilities: * Log management * Advanced threat detection with a continuously updated library of pre-built correlation rules * Actionable threat intelligence updates from AlienVault Labs Security Research Team * Rich analytics dashboards and data visualization

HoneyVIew ist a tool to analyze honeyd-logfiles of the honeyd-daemon implemented by Niels Provos in an convenient way. HoneyView generates graphical and textual results from queries against the logfile data.

AutoIndex is a PHP script that makes a table that lists the files in a directory, and lets users access the files and subdirectories. It includes searching, icons for each file type, an admin panel, uploads, access logging, file descriptions, and more.

The pimped Apache status makes the Apache server status readable, sortable and searchable. The pimped Apache status can merge the status of several servers that opens the possibility to identify the troubleshooter even in a loadbalanced website. The webbased tool offers a multilanguage, skinable interface with a built-in updater. In several views you see most requested pages, vhosts, used methods, IPs that make the most requests and more. All views are sortable tables you can filter by a keyword and are available as API Request too to get its data as CSV, XML or JSON. Compatible with PHP 7+8 (and should run on PHP 5.x - but is not supported).

Screen squid is web-based interface for viewing reports based on Squid proxy server log files. It can be accessed from web-browser through more than 50 reports. No extra files, only DB. All reports generated "on-the-fly". And we got personal cabinet for each user/group.

MySQL Squid Access Report

ClickHeat is a visual heatmap of clicks on a HTML page, showing hot and cold click zones. Requires Javascript on the client to track clicks, PHP and GD on the server to log clicks and generate the heatmap. You should download it on Github where the project has moved: https://github.com/dugwood/clickheat

FreeBSD Forensics Bootable ISO

SNĒZ is a web interface to the popular open source IDS programs SNORT® and Suricata. IDS output can be unified2 or JSON formats. The main design feature of SNĒZ is the ability to filter alerts based on criteria set by, and documented by, a security analyst. Alerts are viewed and summarized in different ways, filtered, and documented until ideally no alerts remain. At any time, filters can be suppressed so that all collected alerts can be analyzed for patterns, forensics, etc. Filters can also be used to hide noisy alerts without deleting them or suppressing them at the IDS. An effective strategy for dealing with noisy alerts can be achieved by combining alert thresholding at the IDS and filtering in SNEZ. SNORT® is a registered trademark of Sourcefire, Inc. All rights reserved.

SRG is a log file analyser and report generator for the Squid web proxy. It is fast and was created to allow easy integration with other authentication systems. SRG is flexible and can report right down the the level of individual files requested.

The Distributed Intrusion Detection System.

Adobe Flash Media Server Access log analyzer written in PHP and using MySQL as a backend database store.

JAVA / PHP / MYSQL IRC Stats Bot based on IRC JAVA BOT. Makes statistics for one or more channels on irc. Make many php page with the stats of channels and the stats of nicks.

Internet Access Control (IAC) is a LAMP system that integrates with Squid to deliver real-time graphical statistics, billing, monitoring and more.

SIGOF (Security Information Graphics Oriented Forensic) aims at synthetizing security log, stored in a acid/base database schema, in order to provide a graphical / visual oriented security forensic and statistical analysis.

SqStat is a script which allows to look through active squid users connections. It use cachemgr protocol to get information from squid proxy server.

TraffStats: network Traffic Statistic - is a monitoring and traffic analysis software, using SNMP to collect data from any enabled device. - has the ability to generate graphs (using jpgraph) with the option to compare and sum up different devices.

Web Traffic Analysis Software (or counter) supporting all known SQL databases (or XML). Easy install/upgrade, advanced user recognition technics, high usability.<p />Tracks users via: a) Server Logs, b) PHP inc., c)Web Beacons (JavaScript)

ConnView is conntrack table viewer. It is php script - frontend for ip_conntrack table. You can choose filtering, sorting for connections. Script recognizes common services in conntrack table .You can see connection list, or detail list per IP, etc.

jsvnstat is a web frontend for vnstat. It is largely based on javascript, so you can easily switch views without reloading the entire page. The graph is interactive, just hover over a datapoint to see what I'm talking about. Requires: vnstat, PHP

phpSAM is a tool written in PHP intended to handle the events logged by snort(snort.org) in MySQL. There is being worked on making graphs more intuitive. For an update on the progress, please do not hesitate to visit phpsam.sf.net

A PHP script to submit .scrobbler.log/.scrobbler-timeless.log files made by DAPs (Rockbox only at the moment) via the audioscrobbler servers to the Last.fm music blogging site.

Application to display, as well as interpret, firewall information from a database to serve a variety of users needs. The application is online and cross-platform, written using PHP.

AVirCAP is a system for manual and / or automated detection of CodeRed and Nimda type of hack attempts and virtually all other kinds of "logable" intrusion attempts. It can work stand alone or together with other additional AVirCAP machines in the LAN/W

PHP addon for AWSTATS to allow viewing of statistics for multiple domains on a single dynamic page