Open Source PHP Networking Software for Linux

OSSIM, AlienVault’s Open Source Security Information and Event Management (SIEM) product, provides event collection, normalization and correlation. For more advanced functionality, AlienVault Unified Security Management (USM) builds on OSSIM with these additional capabilities: * Log management * Advanced threat detection with a continuously updated library of pre-built correlation rules * Actionable threat intelligence updates from AlienVault Labs Security Research Team * Rich analytics dashboards and data visualization

The pimped Apache status makes the Apache server status readable, sortable and searchable. The pimped Apache status can merge the status of several servers that opens the possibility to identify the troubleshooter even in a loadbalanced website. The webbased tool offers a multilanguage, skinable interface with a built-in updater. In several views you see most requested pages, vhosts, used methods, IPs that make the most requests and more. All views are sortable tables you can filter by a keyword and are available as API Request too to get its data as CSV, XML or JSON. Compatible with PHP 7+8 (and should run on PHP 5.x - but is not supported).

HoneyVIew ist a tool to analyze honeyd-logfiles of the honeyd-daemon implemented by Niels Provos in an convenient way. HoneyView generates graphical and textual results from queries against the logfile data.

Pothos is an iptables log analyzer. It is used to interpret, in a user-friendly fashion, the logs that ulogd creates with it's MySQL plugin. It's main objective is to be efficient, leaving as small a foot-print as possible.

The Distributed Intrusion Detection System.

TraffStats: network Traffic Statistic - is a monitoring and traffic analysis software, using SNMP to collect data from any enabled device. - has the ability to generate graphs (using jpgraph) with the option to compare and sum up different devices.

(Deprecated for vnstat 2.0+, because of the removal of the --dumpdb feature) jsvnstat is a web frontend for vnstat. It is largely based on javascript, so you can easily switch views without reloading the entire page. The graph is interactive, just hover over a datapoint to see what I'm talking about. Requires: vnstat 1.x, PHP

Application to display, as well as interpret, firewall information from a database to serve a variety of users needs. The application is online and cross-platform, written using PHP.

AccounteX is an IP accounting system based on the IP Stat program. It has many exciting features like fully customizable web traffic accounting and user access control by many different values. information service and web statistics and administration.

The goal of this project is to provide a liveCD allowing the user to analyze networks for VoIP installations. This project gives you a global network state.

Capra is a Open Source tool to quickly get some nice and useful reports out off your Watchguard Fireware log files.

Keep your eye on unlimited number of machines using CheckPing. Timeouts, ping times, live graphs and notification via mail/SMS/pager/etc.

A Tool used in conjunction with glftpd to dynamically create reports on users groups. And Allow the user to access those reports through the web, irc, and glftpd itself

IPHPLog (IP PHP Log) is a simple software written in PHP, JS and SQL that runs over a MySQL database manager system . IPHPLog can log the information of your visitors and organize that on a data base with GeoIP.

What are the packets rejected by your Netfilter based firewall today ? How often this suspicious host try to connect to your box ? What are the most rejected domains ? Who is this strange host which scan your ports ? The responses are in the iptables log

Ida, is a Apache log security analyzer written in PHP. It will scan Apache logs and report about security incidents like SQL injections, XSS attacks, path traveling and so on.

Traffic accounting suite for Linux that comes with a webinterface written in PHP. Requires iptables, its ULOG target and MySQL for data storage. This system uses categories which are fed by iptable rules that can be defined using the webinterface.

An easily configurable single php page for viewing graphs from MRTG via RRDTool.

This project contains PHP code and classes to pull NTOP Statistics out of a mySQL DB... Info such as host name, IP addresses, client ports, TCP Sessions, etc... can be reported on. Other reports are easy to add on.

This automated multiusers ping report is PHP scripts that ping some hosts and get the result and put in My-SQL Database and report it briefly to plaintext and detaily to SQL, Ms. Excel , PDF file, and the report is print friendly.

A HTTP-Proxy (TCP-Forwarder) which allows to measure and block (filter) Internet Access for Stations or Rooms online on a PHP-Page. Designed, recommended and used for classrooms with public internet access. It is neccesary to have a Privacy-Agreement

SIGOF (Security Information Graphics Oriented Forensic) aims at synthetizing security log, stored in a acid/base database schema, in order to provide a graphical / visual oriented security forensic and statistical analysis.

SquiDeral - manipulating the cache usage of Your network.

PHP Daemon & Frontend for Squid Web Proxy Server. Provides both User Based bandwidth Monitoring, and Squid Logfile Analysys. Allows users to generate graphs of traffic usage, based on many different factors.

SquidFire is a PHP script to search Squid logs by IP or keywords. Its designed to make tracking specific users and sites easy.