LKL is a userspace keylogger that runs under Linux on the x86 arch. LKL logs everything that passes through the hardware keyboard port (0x60). It translates keycodes to ASCII with a keymap file.
Echelog is a distributed system consisting of agents and one or
more servers. Agents, distributed on computers over network, are monitoring the
state of hosts and network. Collected data are sent to servers where they are processed and stored.
The X-Log Library (xlib) provides several logging functions for any program to utilize. Supports plain text and XML logging. Xlib also uses XSLT to display the XML-style logs in a nice graphical way.
loginote is a program to immediately display a note on screen (using xosd) when a user logs into the system or logs out again. Just imagine someone knows your password and you might be interested when he/she logs into your system.. ;). loginote will tell
Liblogging is an easy to use open source library for system logging. It support various RFC for syslog reporting, most notably RFC 3195 for reliable delivery of syslog messages. Liblogging has an easy to use client and server side interface.
Xianc gets statistics mostly from a firewall program like iptables but it supports a file as input too. The byte counter from the an interface in Window can also be used. Xianc can show bandwith usage, stores it in a cache file to survive a reboot, and c
imsniff is a pcap-based instant messaging sniffer. It captures the IM traffic in the network and is able to log conversations, contact lists, profile information, incoming email notifications, other MSN events, etc. Tested in Linux and Windows.
Move workloads across hypervisors and clouds with no vendor lock-in. Try VDP free today.
Try Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
Searches arbitrary text input (logs, etc) for regular expression(s) matching, and then executes arbitrary SQL statement(s) with matched substrings used as parameters. Offers daemon, incremental and transactional features.
A tool to monitor and analyse data transmitted between clients
and a server through a TCP connection. This tool focuses on the data stream
(software layer), not on the lower level transmission protocol as
packet sniffers do.
A statistics utility to be used with qmail-scanner. It utilizes log entries generated by a patch to the qmail-scanner distribution to report spam and virus details. Often included in the qmailstats script from QmailRocks.org to send nightly stats emails.
A simple log viewer for Linksys WAP54G (and possibly other) Wireless Acess Points. The log viewer listens on a port (default the syslog port; UDP 514) for log packets from the router and dumps them to syslog, screen or file.
Provides an open-source, platform-independent Event Logging facility for the Linux Operating system and Linux applications, that offers capabilities and features required in medium-to-large Enterprise-class systems.
Serial line sniffer (slsnif).
slsnif is a serial port logging utility. It listens to the specified serial port and logs all data going through this port in both directions.
IP accounting tools package based on Berkeley Packet Filer mechanism. Continue from BPFT by V.Vorobyev, TRAFD by V.Belekhov & S.Svirid.
Use the PCAP library to implement connection to bpf kernel pseudo-device.
sentinel is a network traffic monitor. You can monitor specific
packets to/from network interfaces, internet protocol addresses
and also define specific filters for protocol, port and flag
properties of a packet. Output can be directed to database,
p
This project intends to build a complete CallerID-function for home- or small buisniess environments. It depends on simple hardware which everyone can build. It will present the incomming call's number on every workstation on the network.
tcpick is a textmode sniffer; it tracks tcp streams, shows the status, reassembles and saves the data captured in files or displays them in the terminal in different modes (ascii, hex..). There is a color-mode. Useful to get files passively.
General line based buffer with backlog written in "C". It supports multiple input and a single output. I/O modules: TCP/IP, UDP/IP, Unix sockets, File/Pipe. It supports backlog writing (and resume) so a failsafe transport-buffer can be build.
Templario is a security event audit and compliance suite which helps you to monitor enterprise security from one central console. Templario automates and consolidates complicated enterprise network security auditing and requires near-zero administration.
Log common Windows trojan attempts (and optionally emulate the trojan).
*This project is not actively maintained, and the software is of little use today.*