SNĒZ is a web interface to the popular open source IDS programs SNORT® and Suricata. IDS output can be unified2 or JSON formats.
The main design feature of SNĒZ is the ability to filter alerts based on criteria set by, and documented by, a security analyst. Alerts are viewed and summarized in different ways, filtered, and documented until ideally no alerts remain. At any time, filters can be suppressed so that all collected alerts can be analyzed for patterns, forensics, etc.
Filters can...
Strong Email & Apache Log Analysis with Active Security Features
...X-Itools E-mail management module (log analysis) initiated in 2004 with Web 1.0 technologies (private SVN server).
X-Itools development restarted since 2011, on the basis of a unique module: E-mail management module (log analysis). Now based on web 2.0 technologies (ExtJS 4.1) and devel restarted because of a particular interest given to it by a world wide Organization (United Nations). Module renamed "X-Itools ELSE", for "X-Itools E-mail Log Search Engine". Some features: Log analysis and correlation of Postfix and Exchange servers, statistics, policy manager, in-deep analysis, automated network graphs for e-mail tracing, CSV export... ...
OSSIM, AlienVault’s Open Source Security Information and Event Management (SIEM) product, provides event collection, normalization and correlation. For more advanced functionality, AlienVault Unified Security Management (USM) builds on OSSIM with these additional capabilities:
* Log management
* Advanced threat detection with a continuously updated library of pre-built correlation rules
* Actionable threat intelligence updates from AlienVault Labs Security Research Team
* Rich...
IP2Location C library enables the user to find the country, region, city, coordinates, zip code, time zone, ISP, domain name, connection type, area code, weather, MCC, MNC, mobile brand name, elevation and usage type that any IP address or hostname originates from. It has been optimized for speed and memory utilization.
Developers can use the API to query all IP2Location™ binary databases for applications written in C or supporting static/dynamic library.
(Deprecated for vnstat 2.0+, because of the removal of the --dumpdb feature)
jsvnstat is a web frontend for vnstat. It is largely based on javascript, so you can easily switch views without reloading the entire page. The graph is interactive, just hover over a datapoint to see what I'm talking about.
Requires: vnstat 1.x, PHP
NOTE: This project is no longer under active developement.
Check out the successor at: https://github.com/jensvoid/lorg
Web Forensik ist a script that uses PHPIDS to automatically scan your HTTPD logfiles for attacks against web applications. Check the Wiki for installation, configuration, usage.
G.R.E.A.T. - Google Earth Reporting Engine and Analysis Tool The Goal of this project is to create a basic IDS interface with Google Earth. Currently generates a KML file of traceroute/whois information suitable for use in Google Earth
MySQL log analyzer and profiler. Extracts the most popular queries grouping them by their normalized form and shows the statistics for each group. Helps developers to recognize most frequently run queries to be able to optimize overall db performance.
ClickHeat is a visual heatmap of clicks on a HTML page, showing hot and cold click zones. Requires Javascript on the client to track clicks, PHP and GD on the server to log clicks and generate the heatmap.
You should download it on Github where the project has moved: https://github.com/dugwood/clickheat
The basis of this project was to create a simple to use parser for Nmap XML output files. This framework should make it simple to parse said XML into any type of output, given a proper namespace and tag grouping.
Slogbase is a lightweight database attached to objects in Second Life that provides the same functionality as Apache Web Server logs. It uses ordinary LSL code in Second Life to send sensor data to an external PHP/MySQL application.
This is the effort to make a simple small business server that provides basic infrastructure with spam and virus protection, service usage accounting and reporting, easy provisioning and password management, message board, addressbook and other.
System for Web usage mining and data warehouse: it allows the discovery of knowledge from data (KDD) regarding users' usage on the Web (such as unique visitors, sessions, transactions) and organise it in a RDBMS (currently PostgreSQL). Written in C++.
DAD is a Windows event log and syslog management tool that allows you to aggregate logs from hundreds to thousands of systems in real time. DAD requires no agents on the servers or workstations. Correlation and analysis is driven through a web front end.
The Sparten Log Viewer is designed to allow users to view log files online through a web browser. It is currently based on php and runs on any platform that support standard unix log format, php, and tail.
phpMyVisites is a Web traffic analyzer with very detailed reports and advanced graphics. It is not an Apache log analysis tool. phpMyVisites creates its own logs, and it allows access to more complete statistics. phpMyVisites provides information about v
The goal of this project is to provide a liveCD allowing the user to analyze networks for VoIP installations. This project gives you a global network state.
SRG is a log file analyser and report generator for the Squid web proxy. It is fast and was created to allow easy integration with other authentication systems. SRG is flexible and can report right down the the level of individual files requested.
Gathers data from vpopmail domain and user usage, stores in mysql, and displays a list by user and domain, current quota, quota usage, last time/date of auth, last auth ip, aliases pointing at the address, and aliases pointing to external domains.