Open Source Linux Log Analysis Software

AWStats is a free powerful and featureful server logfile analyzer that shows you all your Web/Mail/FTP statistics including visits, unique visitors, pages, hits, rush hours, os, browsers, search engines, keywords, robots visits, broken links and more

OSSIM, AlienVault’s Open Source Security Information and Event Management (SIEM) product, provides event collection, normalization and correlation. For more advanced functionality, AlienVault Unified Security Management (USM) builds on OSSIM with these additional capabilities: * Log management * Advanced threat detection with a continuously updated library of pre-built correlation rules * Actionable threat intelligence updates from AlienVault Labs Security Research Team * Rich analytics dashboards and data visualization

Logs Analyzer, Alerter & Reporter with a Web Interface

AutoIndex is a PHP script that makes a table that lists the files in a directory, and lets users access the files and subdirectories. It includes searching, icons for each file type, an admin panel, uploads, access logging, file descriptions, and more.

Free-SA is logs processor and report generating tool. It can be used to control traffic usage, to evaluate conformance to the Internet access security policies, to investigate security incidents, to evaluate web server efficiency and to detect troubles with server configuration.

TTY Web Statistics is a PHP3 script that will generate full statistics from Apache combined logs.

ISPMan is a system to design massive ISPs using LDAP as the backend. ISPMan provides a web front end and a command line interface to create virtual domains and manages users, dns information, email infos and httpd setup data for these vhosts.

ttyrpld is a multi-OS kernel-level TTY keylogger and screenlogger with (a)synchronous replay support. It runs on Linux, Solaris, FreeBSD, NetBSD and OpenBSD.

The goal of this project is to provide a liveCD allowing the user to analyze networks for VoIP installations. This project gives you a global network state.

This project can be used by webmasters to analyse the average route of visitors. Written in Perl, this project parsed apache's logs and store them in a MySQL database. This function is not implemented in opensource web stats tools like AWStats. I

ClickHeat is a visual heatmap of clicks on a HTML page, showing hot and cold click zones. Requires Javascript on the client to track clicks, PHP and GD on the server to log clicks and generate the heatmap. You should download it on Github where the project has moved: https://github.com/dugwood/clickheat

Esyslogd is an alternative to syslogd. Esyslogd is threaded and it provide an API to get log entries, allready parsed, by TCP/IP.

This PHP script analyses website trafic (referrer, pages hits, country, configuration ) on several periods (days, weeks, months ) . It can export a PDF repport.

What are the packets rejected by your Netfilter based firewall today ? How often this suspicious host try to connect to your box ? What are the most rejected domains ? Who is this strange host which scan your ports ? The responses are in the iptables log

JAVA / PHP / MYSQL IRC Stats Bot based on IRC JAVA BOT. Makes statistics for one or more channels on irc. Make many php page with the stats of channels and the stats of nicks.

Web analyzer for logs from different formats, which output XML reports, multi-hosts logs file supported, possibility to apply an XSL page to ouput in HTML, and use of SVG to make the graphs. The project includes the library to parse HTTP_USER_AGENT

Java and ColdFusion libraries to lookup country code and language from IP address. It uses a local copy of the WHOIS database to perform fast, accurate lookups of country codes. Useful for log analysis, internationalization, geolocation, etc..

JPPS is a Perl script that do stats from an output of the unix/linux ping command

Web site statistics analysis program

META is a decision making software which aims are to track computer attackers, computer attacks and to help investigators finding useful elements.

A number of tools to enhance management/coding of NFR (http://www.nfr.net) IDA, and various other admin tools that can be used for both NFR and hand coding other appliance scripts.

Internet Control Firewall Intrusion Detection and Logger for Inbound and Outbound Traffic. Watches Files and Directories, Drive and Memory Protection.

An PHP-Scipt which displays various informations about your visitors and access details and averages. Demo --> http://ut.freddynet.de/phpstats4u/

PyLogAlyzer is a Web Log Analyzer in Pure Python (a clone of Awstats). PyLogAlyzer produces a XML result and uses XSLT to generate the HTML files.

Qmail-Scanner Statistics (QSS) uses the Qmail-Scanner Logfile to generate daily, monthly, and yearly statistics. It also shows a complete list of viruses stopped by Qmail-Scanner, the top five domains from which the viruses came, as well as the countries