Open Source Log Analysis Software

Free-SA is logs processor and report generating tool. It can be used to control traffic usage, to evaluate conformance to the Internet access security policies, to investigate security incidents, to evaluate web server efficiency and to detect troubles with server configuration.

ISPMan is a system to design massive ISPs using LDAP as the backend. ISPMan provides a web front end and a command line interface to create virtual domains and manages users, dns information, email infos and httpd setup data for these vhosts.

AWStats Enterprise Manager is a tool for managing awstats configuration creation and logfile processing, in a multi-server environment. This script is designed to pull all the webserver logs, for every server, and parse them with awstats.

A simple PHP addon for AWStats which allows viewing and comparing statistics for multiple domain hosted in the same machine.

Smart apache logfile sniffer to assign given IP's to names. It's a tool to check if special guests are visiting your webserver or Big Brother is watching you. Works with a CSV-list of IP's or IP-ranges.

BCLF is the Binary Common Log Format, a fast, platform independent, streamable, compact logging format that resembles the Extended CLF logging format in content. The project goal is to make an Apache module and enhance the format without giving up speed.

Bubbles the simple, easy to use HTTP web server that is browser controlled, and capable of serving static files over the internet, either streamed from disk, or direct from RAM without lag. A GUI administration panel is accessed through your web browser (e.g. "http://localhost:1080/admin/" + default password of "admin"), which controls all her settings and vital functions, all in real time. Apart from serving files, she is capable of tracking site visits (site counters), receiving emails, accepting contact form submissions with support for Spam Guard, and recording site activity as date stamped traffic logs. She also includes a built-in log analyser for making sense of her traffic logs. These and other features make her more than capable of running multiple websites with little to no headache. Her design is light and stable, and an extensive block-based memory management system ensures all her key operations use memory in a sustained and reliable manner.

Caudium WebServer is a single process multi-threaded webserver. It has a built-in pre-processing language and includes an easy to use web-based configuration interface.

This project has two parts. The first one is a hidden counter (using the 1x1 transparent pixel GIF) which registers into a MySQL database all remote IP addresses (whether IPv4 or IPv6), it tries very hard to use IPv6. The second part shows stats.

GALProxy is a multithread proxy server written in java. It can elaborate all upcoming requests from most common browsers. It can be used in a LAN in order to concur the sharing of an Internet connection; it implements local caching, content filtering an

IPHPLog (IP PHP Log) is a simple software written in PHP, JS and SQL that runs over a MySQL database manager system . IPHPLog can log the information of your visitors and organize that on a data base with GeoIP.

Provide a plugabble and configurable alternative to UNIX tools like grep, awk, tail, head, cut, sort, uniq or even some perl based scripts in a Java environment. A bit like what Apache Ant means to good old make.

Php Log Analyzer (aka PLA) is a Log Analysis tool for Apache. There are lots of log analyzer softwares available on the internet but most of them have their own data storage ways. PLA is a tool to analyze log files and store results into MySQL databases.

The objective of this project is create a control panel that should be able to monitorize and analyze a web access, checking softwares versions and, for pentest purposes, redirect connections and explore possibles browsers vulnerability at the client.

This project is a Python-based HTTP web proxy server that hooks into MySQL to store a full history of your browsing. Allows you to check out statistics about your browsing habits. Creates a personal portal page, has search features, multi-user, filters.

Vistigator is a website analyzer, which allows CEO's, CTO's, and users to view info about their website. Vistigator is integrated with Apache 2 HTTP Server, allowing Vistigator to display website stats graphically & easily about specific IP Addresses.

Aeonserv is an authority grade package of the latest in Apache, MySQL, PHP, PERL, AWStats, phpMyAdmin & Geeklog builds. Designed to easily be customized and deployed within a matter of minutes it proves to be professional and ahead of its class.

Anonlog is a program to 'anonymize' web server logfiles by encoding sensitive information, such as hostnames and filenames. This allows the logfile to be sent to a third party without revealing confidential information about the server or clients.

cravlAndBlock is simple java application that cravl error log file of Your web server and add all attacker IPs. I.E. All Modsecure entries, scans and so on. Every bad IP will be added to hosts.deny file with ALL prefix. For sure it will not block all atacks but it will help. How it works: use cron to start java cravlAndBlock.jar in the same folder add properties.xml (I addes sample properties.xml file). And thats all. Program will start from cron, read properties file and make backup of hosts.deny file in backu location, cravl log file / files and add entries to hosts.deny file. It will print log information on the screen. If You are interested in cravl and block project please make a small donation for the author by paypal (to mail tjancz@gmail.com). Those donation will make the project live. Everyone needs to eat something:)

libapache2-mod-scramble-ip encrypts IPs in the apache-server in a way, that you can still work with them (for analytics etc.) but its not possible to find out the original IP.