Software Map

sysklogd-sql is a port of the sysklogd daemon that can log data to a MySQL or PostgreSQL database running either on the same machine or a remote database server. The SQL configuration is done in the standard syslog.conf file for easy administration and configuration. Also included is a set of sample PHP scripts to query the data from the syslog database. In a large environment, you can set up a central logging server, or configure a secure syslog environment that will make it very difficult to tamper with the syslog data.

tinydns-rrd generates realtime graphs from your
tinydns logs by using rrdtool. It works well with
high traffic DNS servers.

ICPLD (Internet Connection Performance Logging Daemon) is a connection monitor that sends ICMP requests to IP addresses of your choice and monitors if your machine has a working network connection. It logs failed attempts to reach the hosts, and will stamp a log as soon as a reply is received. It keeps track of when and for how long the connection was unavailable and records both total down time and each occasion of interrupted connection. It supports IPv6 and can execute a command whenever a connection goes up or down, which is useful for alerting users.

Logfmon monitors a set of log files and processes
messages based on a set of regexps. When a message
matches, a command may be executed or the message
may be ignored. Messages that are unmatched are
batched together and emailed every so often.

RazorBack is a log analysis program that
interfaces with the SNORT open source Intrusion
Detection System to provide real time visual
notification when an intrusion signature has been
detected on the network. RazorBack is designed to
work within the GNOME framework on Unix platforms.

Wflogs is a firewall log analysis tool. It can be used to produce a log summary report in plain text, HTML, and XML, or to monitor firewalling logs in real-time. For now, netfilter, ipchains, ipfilter, cisco_pix, cisco_ios, and snort input formats are supported. It is particularly fast when asynchronous DNS resolution is enabled.
The goal of the WallFire project is to build a very general and modular firewalling application based on Netfilter or any kind of low-level framework. Wflogs is part of the WallFire project, but can be used independently.

AccTail shows extended resource usage
information for all processes that have exited,
unlike top or ps which only detail currently
executing processes. It can be useful in
combination with wtmptail or MultiTail.

SRG (Squid Report Generator) is a log file
analyzer and report generator for the Squid Web
proxy. It was created to allow easy integration
with authentication systems such as those that are
used for squid itself. It is fast and flexible,
and can report details down to the individual
files fetched.

python-jabberbot is a Jabber bot framework for
Python that makes it easy to write simple Jabber
bots. One can use these Jabber bots to provide
information about running systems, to make Web
sites interact with Jabber-enabled visitors, or
notify the bot owner about updates or changes that
are monitored with custom Python scripts.

Apache::Logmonster is a tool to collect log files from multiple Apache Web servers, split them based on the virtual host, sort the logs into chronological order, and then pipe them into a log file analyzer of your choice (Webalizer, http-analyze, AWstats, etc).

The atsar command can be used to detect
performance bottlenecks on Linux systems. It is
similar to the sar command on other UNIX
platforms. Atsar has the ability to show what is
happening on the system at a given moment. It also
keeps track of the past system load by maintaining
history files from which information can be
extracted. Statistics about the utilization of
CPUs, disks and disk partitions, memory and swap,
tty's, TCP/IP (v4/v6), NFS, and FTP/HTTP traffic
are gathered. Most of the functionality of atsar
has been incorporated in the atop project.

Jukebox is a collection of reusable components that allow you to create a flexible server-side and middleware framework. It features semaphores and services (not quite your usual set), a Finite State Machine implementation based on Generics, a Datastream framework (data producers, consumers and loggers), and a JDK 1.6 compliant JMX framework based on Annotations.

kfsmd (kernel filesystem monitor daemon) is a
daemon to log and view kernel filesystem changes
using inotify. Its main purpose is to allow
libferris to reindex all updated files while you
are sleeping.