Open Source Logging Software

NSClient++ is a windows service that allows performance metrics to be gathered by Nagios (and possibly other monitoring tools). It is an attempt to create a NSClient and NRPE compatible but yet extendable performance service for windows.

BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a web front-end to query and analyze the alerts coming from a SNORT IDS system.

Perl logfile analyzer for DELL Sonicwall Firewall logfiles. This Perl program (Windows /Linux / Mac), creates an HTML file containing: hits per protocol, mean, median and variance on hourly and weekday basis, RBL statistics, IPS stats, VPN stats, virus stats, surfing statistics, CFS blocked sites stats.

VScan is a small, text-based, platform independent port scanner written in python, which supports multithreading and banner grabbing.

Lilith is a logging and access event viewer for Logback, log4j & java.util.logging. It has features comparable to Chainsaw for log4j. This means that it can receive logging events from remote applications using Logback as their logging backend

Big Sister is an SNMP aware network and system monitor

A complete OpenSource Network Management System Is SNMP-Standard Oriented (tested on Cisco and Linux). It Integrates Syslog, Tacacs, RRDtool (Performance Graphs), Maps, Traps, TFTP, Autodiscovery, Sound Alerts, AAA, Modular and Extensible.

A tool for Multi-Router Traffic Graphing software, MRTG Spike Remover removes anomalous "spike" data from the MRTG logs in order to faciliatate reading the parts of the graph important to the surveyor, leaving out irrelevant data outliers.

360-FAAR (Firewall Analysis Audit and Repair) is an offline, command line, firewall policy manipulation tool to filter, compare to logs, merge, translate and output firewall commands for new policies, in Checkpoint dbedit, Cisco ASA or ScreenOS commands, and its one file! Read Policy and Logs for: Checkpoint FW1 (in odumper.csv / logexport format), Netscreen ScreenOS (in get config / syslog format), Cisco ASA (show run / syslog format), 360-FAAR compares firewall policies and uses CIDR and text filters to split rulebases / policies into target sections and identify connectivity for further analysis. 360-FAAR supports, policy to log association, object translation, rulebase reordering and simplification, rule moves and duplicate matching automatically. Allowing you to move rules to where you need them. Build new rulebases from scratch with a single 'any' rule and log files, with the 'res' and 'name' options. Switch into DROPS mode to analyse drop log entries.

Application Heartbeat Monitor is a daemon + library that applications register with to have their life signs monitored.

BASE+ (Basic Analysis and Security Engine) is based on ACID project. This application provides a web front-end to query and analyze the alerts coming from various IDS systems (e.g. Snort).

Cisco Perl Tools contains CIPAT (Cisco IP Accounting aggregator) and ISDN-Reporter (Cisco ISDN call aggregation and reporting tool). [NetProvisioning has moved to its own project page on SF]

Compiere-NMA is a compiere module for network monitoring, pbx cdr, accounting and billing. Target is to provide the needed infrastructure for providers and companies needed to monitor and bill IP networks based on Compiere ERP + CRM.

CorbaTrace is a helpful tool for tracing communications beetween Corba objects. Once CorbaTrace is installed, remote calls are intercepted and informations are stored in XML files. So, you will be able to apply filters and get XMI files to see the commu

DPytHOS is a means for administrators of large networks to both monitor and manage the servers under their control. DPytHOS is implemented in python and uses a generic database back-end (with MySQL supported and MS-SQL 2000 supported via XML)

GeneSyS is an open generic framework for network and system management, based on intelligent software agents using web-services/SOAP. It is a supervision tool for monitoring, management and control of distributed applications built with Java, .NET, PHP.

Hyperic is application monitoring and performance management for virtual, physical, and cloud infrastructures. Auto-discover resources of 75+ technologies, including vSphere, and collect availability, performance, utilization, and throughput metrics.

Insidias is a next-generation intrusion detection engine, with a focus on speed, efficiency, advanced pattern matching, parallel-processing, modularity, and expandability.

Kojoney is an easy of use, secure, robust and powerfull Honeypot for the SSH Service written in Python. With the kojoney daemon are distributeds other tools such as kip2country (IP to Country) and kojreport, a tool to generate reports from the log fi

monitors logfiles and displays in realtime. log messages may be formatted with different fonts and colors, contents can be parsed, reformated, may even trigger actions playing sounds or executing shell commands. Log can be viewed remotely via webbrowser.

This project is dedicated to finding best of breed open source monitoring products, tools, sysadmin tools and overall systems management stuff. We will take all these components and make them work together.

NLog is a logging platform for .NET with rich log routing and management capabilities. It uses familar logger pattern known from log4xxx. Advanced routing options include buffering, asynchronous logging, load balancing, failover, and more.

Network Keylogger is a program that sends every key pressed in a computer to another computer, via TCP/IP.

netleak is a collection of small perlscripts that detects connectivity between network segments. It is mostly useful to detect "leaks" in large organizations that have private network segments physically separated from the Internet.

Node Runner is a PHP network monitor which is designed to contact network nodes in a specific order based on the hierarchy of your network. If a node does not respond, each of its parents are systematically checked until the true problem is identified.