Open Source Logging Software

smartmontools contains utility programs (smartctl, smartd) to control/monitor storage systems using the Self-Monitoring, Analysis and Reporting Technology System (S.M.A.R.T.) built into most modern ATA and SCSI disks. It is derived from smartsuite.

Ettercap is a multipurpose sniffer/interceptor/logger for switched LAN. It supports active and passive dissection of many protocols (even ciphered ones) and includes many feature for network and host analysis. Development has been moved to GitHub, https://github.com/Ettercap/ettercap

Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases. For Linux, FreeBSD, OpenBSD, Solaris, OSX,etc.

A resource-conscientious, flexible, modular, platform-independent, scalable and robust server based on ircd-ratbox.

Bukkit Log Viewer is a simple, easy-to-use and lightweight program, which loads Bukkit server logs, and highlights the different logs, depending on the logger level. Below is a colour code: FINE = > green FINER = > green FINEST = > green INFO = > cyan SEVERE = > red WARNING = > yellow

Impost is a network security auditing tool designed to analyze the forensics behind protocol exploitation.

An easy-to-use Java desktop application to centrally monitor resources from a variety of environments, including the ability to dynamically set up rules to trigger actions based on monitoring. Clients connect via simple and efficient UDP based protocol.

KISS is a kernel-side host-oriented security tool, which may bring you file integrity checking, file and process hiding and actions handling on special internal events (using a tiny scripting language).

Colourizing a system logs for easier reading.

MSLB is a crossplatform Simple Logbook program / application to write work logs or even a diary. MSLB can also use a bunch of presets that you can add with a simple doubleclick :) Logs get saved in a simple folder system. And its all portable.

NXLog is a modular, multi-threaded, high-performance log management solution with multi-platform support. In concept it is similar to syslog-ng or rsyslog but is not limited to unix/syslog only. It can collect logs from files in various formats, receive logs from the network remotely over UDP, TCP or TLS/SSL . It supports platform specific sources such as the Windows Eventlog, Linux kernel logs, Android logs, local syslog etc. Writing and reading logs to/from databases is also supported. The collected logs can be stored into files, databases or forwarded to a remote log server using various protocols. The old BSD Syslog and the newer IETF syslog standard is fully supported by NXLog in addition to Snare, XML, JSON, GELF, KVP, CSV and custom formats. A key concept in NXLog is to be able to handle and preserve structured logs. No need to convert everything to syslog and parse these logs again at the other side. It has powerful message filtering, log rewrite and conversion capabilities.

SETILog saves some statistics of a completed SETI@home work-unit in a text CSV file. This file is needed by SETIWatch to keep track of the completed workunits.

Scanhill is a Microsoft Messenger Protocol Sniffer. Currently it can only intercept Instant Text Messaging. Given that mySQL is used, stored instant messages can be read through a browser interface that is written in PHP language.

Shows who is using the bandwidth on your unix machine in real time. Prints a list of users/procs, bytes in/out/total, local port, remote IP/port, ordered by bandwidth usage. TCP only.

hawKeye, the next generation cyber-surveillance system

SpreadAppender is a log4j appender module that broadcasts log messages over a local multicast network using the Spread API. It is very efficient and perfect for clusters of network applications. Your sysadmin will thank you for it.

my-swatch pretends to be an implementation of msyslog and swatch together. What it pretends to accomplish is put all together, to log events to a remote database (like msyslog) and to awake triggers (like swatch).

a logging system for openbsd's pf. uses postgresql for storage, and is designed to cope with an unreliable network connection to the database.

ttyrpld is a multi-OS kernel-level TTY keylogger and screenlogger with (a)synchronous replay support. It runs on Linux, Solaris, FreeBSD, NetBSD and OpenBSD.