Search Results for "rules"

...Read Policy and Logs for: Checkpoint FW1 (in odumper.csv / logexport format), Netscreen ScreenOS (in get config / syslog format), Cisco ASA (show run / syslog format), 360-FAAR compares firewall policies and uses CIDR and text filters to split rulebases / policies into target sections and identify connectivity for further analysis. 360-FAAR supports, policy to log association, object translation, rulebase reordering and simplification, rule moves and duplicate matching automatically. Allowing you to move rules to where you need them. Build new rulebases from scratch with a single 'any' rule and log files, with the 'res' and 'name' options. Switch into DROPS mode to analyse drop log entries.

PyLogAnalyzer is a tool that receives an input log in black and white, a configuration INI file, which contains the list of rules to process the input, and an output file where to save the results. These rules permit to detect an input line according to a regular expression (regex) or line number range, filter it, pass it, colorise in foreground and background, columnise the groups of the regex and enable or disable the rule. The final goal of this tool is to ameliorate reading long and difficult b/w logs, speed up the analysis and enhance day to day wearying activities. ...

LogDistiller is a logfile merge and sort tool. Log content is classified according to rules configured in an XML file. Classification results go into reports, which are published : simply stored in a file, sent by mail, or even added to a news feed.

Fail2Ban monitors log files like /var/log/pwdfail or /var/log/apache/error_log and bans failure-prone addresses. It updates firewall rules to reject the IP address or executes user defined commands. Please see code and download from https://github.com/fail2ban/fail2ban . SF Fail2ban portal might not be up-to-date

A highly customizable application for tailing log files. It includes highlight functionality, filter, alerts and much more. Highlight rules can be shared, so if you find a highlight rule that you feel is really good, just copy it to the configuration folder and you are ready to use it.

Java exception extractor. This utility will parse all files (either plain text or bzipped) and tries to search for various exceptions. It then tries to match exceptions against grouping rules (regexps). It is also able to group unrecognised exceptions.

Nuhe is a log monitoring system, which is capable of alarm generation and action when rules are matched against log(s) activity.

An easy-to-use Java desktop application to centrally monitor resources from a variety of environments, including the ability to dynamically set up rules to trigger actions based on monitoring. Clients connect via simple and efficient UDP based protocol.

GILoT is an interpreting and formatting log tail:er. As each log entry is matched and formatted against customizeable rules, only relevant data is parsed. GILoT features, atm, two separate user interfaces, a console UI and an ncurses/charva TUI.

The nfcount can be used for count network flows by using rules and display it in form of set html pages. Support network flow records from Cisco NetFlow, Argus, Cisco IP Accounting.

Count traffic from users with dynamic ip addresses. Uses information from application level (Samba, pppd, etc.) to operate on network level (modify ipfw or another firewall rules for traffic counting).

The approach of this project is to provide a tool to analyse logfiles. You can specify rules for the extraction of information from any text files and display and browse them in a swing-based GUI.