Open Source PHP Logging Software

Zabbix is an enterprise-class open source distributed monitoring solution designed to monitor and track performance and availability of network servers, devices and other IT resources. It supports distributed and WEB monitoring, auto-discovery, and more. An enterprise-class distributed monitoring solution for networks & apps

BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a web front-end to query and analyze the alerts coming from a SNORT IDS system.

A complete OpenSource Network Management System Is SNMP-Standard Oriented (tested on Cisco and Linux). It Integrates Syslog, Tacacs, RRDtool (Performance Graphs), Maps, Traps, TFTP, Autodiscovery, Sound Alerts, AAA, Modular and Extensible.

Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases. For Linux, FreeBSD, OpenBSD, Solaris, OSX,etc.

This is a set of perl and php scripts that are used to collect, process, store and display netflow data.

IP accounting tools package based on Berkeley Packet Filer mechanism. Continue from BPFT by V.Vorobyev, TRAFD by V.Belekhov & S.Svirid. Use the PCAP library to implement connection to bpf kernel pseudo-device.

WhoisUP v0.3 monitors hosts via ICMP and shows the status in a web page. When a host is down, the script can send mail, syslog message, open a popup message or play a sound. Moreover, the script monitors if the host exceed the latency threshold limit. The script uses NMap to send ICMP packets and to save the host status into an XML file. Then, WhoisUP reads the XML and shows the report in a web page with AJAX features; in case of host failure the script can send alarms. WhoisUP is useful to monitor hosts (PC, Server, NAS, Router, Switch and so on...) and to receive alerts when a host go down.

MRTG Front End. An individually configurable dynamix indexmaker for mrtg that can also calculate total incoming/outgoing data for a specified time period, view target configurations and more.

SNARLsnmp is a web application monitor for net-snmp 5.0.3 and higher. it actively monitors performance, content, some logic and is capable to even monitor complex web transactions with highly dynamic URLs and many other features

Automated Security Tools (autosec) aims to provide automatic tools which network administrators may use to help check and test the security of their network.

Aware is a high performance distributed event processing framework built for systems management/monitoring. See http://www.elegant-software.com for more info.

BASE+ (Basic Analysis and Security Engine) is based on ACID project. This application provides a web front-end to query and analyze the alerts coming from various IDS systems (e.g. Snort).

Cupido is a project aimed at heterogenus systems monitoring, passively (trough SNMP Traps), actively (trough various monitoring techniques). Managing and reporting is all WEB Based.

The Distributed Intrusion Detection System.

monitor - pings nodes, records response times, and alerts when unreachable checkinout - check in/out tracker for Helpdesk items logger - configuration change logger and notifier assets - asset manager (yet to be developed) projects - project tracker (yet to be developed)

FWNUA (Free Windows Network User Accounting) runs silently in a Windows login script or GPO and collects data about user logins. FWNUA keeps track of the workstations logins so you don't have to! FWNUA now supports syslog and Splunk! Look for the fwnua - syslog version in the files list. Use Splunk or your own syslog server with data mining tools to create a robust user tracking system. Find our Spunk app on Splukbase: https://splunkbase.splunk.com/app/2773/

"Google Hack" Honeypot Project. GHH is written in PHP and assists the development of web based honeypots designed to lure search engine hackers.

The High Interaction Honeypot Analysis Toolkit (HIHAT) allows to transform arbitrary PHP applications into a web-based Honeypot. A semi-automatic user interface supports the analysis process, scans for attacks etc.

What are the packets rejected by your Netfilter based firewall today ? How often this suspicious host try to connect to your box ? What are the most rejected domains ? Who is this strange host which scan your ports ? The responses are in the iptables log

The firewall traffic counter are scripts which are parsing iptables output and writing it to a log file. A PHP script displays grahpical on-the-fly statistics about traffic (summary,email and gameserver traffic). Monthly, daily reporting supported.

This project is dedicated to finding best of breed open source monitoring products, tools, sysadmin tools and overall systems management stuff. We will take all these components and make them work together.

The NetworkLens project provides a flexible alarm capturing, analysis, and reporting system for NOC personnel and/or system administrators. Several different input mechanisms are available, as are customized queries and logging facilities.

Node Runner is a PHP network monitor which is designed to contact network nodes in a specific order based on the hierarchy of your network. If a node does not respond, each of its parents are systematically checked until the true problem is identified.

Why to pay tens of thousands $$$ for your network management software? Get visibility into your networks and complex processes inside with NG-NetMS now! NG-NetMS is a new end-to-end network management platform for your Linux servers, Cisco, Juniper, HP and Extreme routers, switches and firewalls. NG-NetMS is precise, quick and efficient. It collects most complete information about the network inventory, topology, map of IPv4 addresses quickly and with minimum hassle. Most important you will be able to collect, process and analyse Syslog events and SNMP alarms both in near-real-time and from the historical archives in a new way. We successfully used NG-NetMS for delivery of network assessment services for our customers worldwide for many years. And now we want to share this unique and fully functional tool with community. It is not capped in terms of performance or number of nodes. The only limit is the hardware you deploy it on. http://www.opt-net.eu/

The Open Host Monitor provides an open extensible solution to monitoring availability of all aspects of ICT equipment and infrastructure. It makes use of various technologies including SNMP and custom agents running on the target hosts.