Open Source Linux Logging Software - Page 27

Catch bad visitors to your php website that are looking for admin access or exploitable web scripts, automatically lookup abuse information for their IP address and notify their network's administrators of their bad behavior. Most network operators provide abuse contact email addresses in their WHOIS information, and your webserver can immediately report malicious access attempts as they happen. A large amount of bots that sniff around websites for unsecured standard web apps (like phpMyAdmin or WordPress) to exploit are run by a very few bad actors. They're easy to catch by watching for attempted visits to pages that don't exist (usually with admin or db in the path). The more these bad robots get reported (and shut down by their ISPs), the more time they have to spend looking for new hosts instead of new websites they can hack into.

A Tcl interface to the PAM service of Linux. It provides a Tcl package that allows Tcl scripts to use PAM to authenticate users and programs.

A Tcl interface to the *nix syslog service. It provides a Tcl package that allows Tcl scripts to log messages to syslog.

Templario is a security event audit and compliance suite which helps you to monitor enterprise security from one central console. Templario automates and consolidates complicated enterprise network security auditing and requires near-zero administration.

This command-line tool allow to retrieve data from the Testo 175/177 sensor.

The goal of the A.I.G. project is to create a "front end" script that will custom build chart generation code for any environment based on user input.

A daemon that runs as a non-privileged user, sending updates of server status to a set of peers, which can keep state with rrdtool databases. You can specify information elements such as uptime, network counters (pps/bps), diskIO, load, and more.

The Internet Censor is a multi-platform, Internet clustering program, for which the resulting data will be used in the creation of a non-profit content-filtering Internet Search Engine for children.

The Linux BSM is an auditing tool that aims to bring the capabilities of Sun's Solaris Basic Security Module to Linux.

The Plague provides a web UI to a MySQL db of parsed syslog data. The focus has been security reporting. The logs supported (so far) are NetScreen firewalls, Cisco routers and switches and PIXen, Gauntlet firewalls.

The SysMonitor (also Mosyloon) is software for real-time checking load of CPU on unix/linux machines over the Internet. Including server side CLI utility and unix/linux/windows GUI client. The SysMonitor displaying system and user load separately.

The X-Log Library (xlib) provides several logging functions for any program to utilize. Supports plain text and XML logging. Xlib also uses XSLT to display the XML-style logs in a nice graphical way.

TheEye is a php-based remote monitor. Executes remotes tests (disk usage, memory free, cpu usage, services status) through ssh/rsh and saves results in a mysql db. Tests are highly configurables. Html report & mail alerts.

Java logging can be a Kafkaesque mess of complexity that buys you little. Getting even the simplest logging working can be comically hard, and it often gets worse at scale as your needs become more sophisticated. Timbre offers an all Clojure/Script alternative that's fast, deeply flexible, easy to configure with pure Clojure data, and that just works out the box. No XML. Easily filter logging calls by any combination of: level, namespace, and appended. Zero overhead compile-time level/ns elision. Useful built-in appenders for out-the-box Clj+Cljs logging. Powerful, easy-to-configure rate limits and async logging. Logs as Clojure values (v3+). Small, simple, cross-platform codebase. 3rd-party tools, appenders, etc. No XML or properties files. A single, simple config map, and you're set. Simple, flexible fn appender model with middleware. Great performance at any scale.

A tool to visualize interactively huge amounts of eventdata. Uses an innovative hierarchical zoomlens scaling from quarters down to 50 ms.

A hardware supported hypervisor originally built for malware analysis. Features: Linux VM introspection, minimal detectability, small (~150KB), simple, and well documented. Can be used for other purposes. Support for Intel-VT & Windows coming soon.

Tomstatus is a Perl script which is designed to be run from a crontab. It logs into different machines (as a user) via ssh and uses simple shell commands to gather some info about the client. The results are formatted into a nice HTML page with graphic

Tool logging facility. UDP server and client library included.

TopSquiD is a plug-in of the server/host proxy SQUID. He enables us to make statistics out of the logs, statistics of daily, monthly and yearly access, which will be on a web page accessible by authentication and sent by e-mail if the user wishes so.

Looks up the total runtime of any process(es) using process accounting and accounting tools with a nice GUI using wxGTK/wxPerl.

Traffic Control is a Linux toolbox to control squid, NAT, and other services traffic limits. TF uses Linux iptables to count traffic. This utility consists of two parts. The first is server side (written in Perl) and the second part is the interface.

TrafficCounter for Draytek Routers (TCDR)

Trafficlogger is a tiny program which logs your traffic from each device that is listet in /proc/net/dev. It logs all traffic (TCP, UDP,...). It is written in ANSI-C and should compile and work on nearly all Linux distributions.

The tribes console log parser is a perl script that will parse starsiege tribes and tribes 2 console logs. The parsed data is stored in a mysql database, and can be retrieved over the web with a supplied php file.

A cross-platform notification daemon written in Ruby. Can be petitioned by an arbitrary application (local or remote) to activate notification plugins. Plugin examples include a popup dialog, a syslog entry, or an email alert.