Open Source Perl Systems Administration Software

swatchdog.pl started out as swatch, the "simple watchdog" for activity monitoring log files produced by UNIX's syslog facility. It has since been evolving into a utility that can monitor just about any type of log. The name has been changed to satisfy a request made by the old Swiss watch company.

LightSquid is a LIGHT and FAST, web based squid proxy traffic analyser . analize access.log and generate per-user & per group report.

[ set status to abandon - volunteers welcome ] The postfix-logwatch / amavis-logwatch log analyzers produce summaries, reports and statistics regarding the operation of postfix and amavis. Use standalone, or as a filter module for the open source logwatch utility.

Scripts and tools to manage your Server.

Simple Event Correlator (SEC) is a lightweight event correlator for network management, log file monitoring, security management, fraud detection, and other tasks which involve event correlation.

Lire is a pluggable log analyzer, supporting HTTP, email, DNS, FTP, firewall and print services. Output generated can be txt, (X)HTML, PDF, RTF, and DocBook. The latter four support graphics. For news/support visit the project homepage.

AWStats Enterprise Manager is a tool for managing awstats configuration creation and logfile processing, in a multi-server environment. This script is designed to pull all the webserver logs, for every server, and parse them with awstats.

IP traffic accounting on CISCO routers.

IP Traffic Volume: Logs (counts) in- & outgoing bytes through network device(s) using kernel iptables. Highly configurable as to which bytes are logged, e.g. to/from specific ports or ip-addresses. Data displayed in html via cgi or plain ascii to console

Monitoring log files is mandatory in all UNIX environments. LoGrobot does this for you efficiently. It analyzes, graphs and alerts on system log files, application log files, database log files, custom log files...basically any log file. Benefits: Automatically scans log files for errors or user specified patterns Shows the offending log entries in the alerts generated on a monitored log file Shows latest size of a log file at the time of the most recent log check Shows total entries written to log file in the most recent check Can tail logs in time frames rather than tailing random lines Monitors and alerts on log file growth Monitors and alerts on log file size Monitors and alerts on log file time stamp Sends out email alert notifications on log files When run without arguments, LoGrobot displays direct instructions on usage. NOTE: For the fully-featured version of the LoGrobot Log File Monitoring tool (also known as logXray), visit www.LoGrobot.com/#download

Logrep is a tool for collection and presentation of information from various logfiles including snort, squid, postfix, apache, sendmail, iptables/ipchains and nt eventlogs. HTML-reports, multi dimensional analysis, ssh and graphs are available.

mrtg-eth is a perl script which provides a probe for the Multi Router Traffic Grapher to print statistics for network devices which do not support the SNMP protocol. It reads if-stats from /proc/net/dev and generates an output suitable for MRTG.

RJStats assists in network and host monitoring by creating many graphs of your servers using rrdtool. These graphs can be viewed using a web browser in any combination you would like to see them.

Rav Antivirus Log Analysis Kit is a collection of scripts that parse the RAV logs and insert the data into a database. Also included is a php front-end that will allow the display of this information.

Squeezer is a multi-dimensional logfile analyzer for Squid web cache server. It measures transfer speed from Squid, source servers and other caches and gives an information useful for tuning Squid and web cache hierarchy or mesh.

SrvReport is a simple and featurefull server monitoring and reporting system. It will send every day a mail with the latest state of the server including traffic (via /proc/net/dev and/or iptables), cpu, mail, http, ftp reports and other logs.

SPA - Streaming Performance Analyzer is a utility to load Windows Media and Quicktime streaming server logs into an Oracle or MySQL database. A WEB based interface is provided from which reports may be viewed.

This RRDTool Framework provides a central HTTP-based service for import into standard RRD DBs and graph generation. A lightweight, easily extendable agent for the data sources is pushing updates with minimal resource consumption on the master service.

csvplus is a collection of Perl-based utilities for querying csv files.

devialog is a behavior/anomaly-based syslog intrusion detection system which detects unknown attacks via anomalies in syslog. It can generate signatures for ease of management, act upon anomalies in a predefined fashion or perform as a standard log parser

Webstats Solr is an attempt to make Apache Access log easier to Data Mine. By adding a powerful Search Engine (SOLR) as a Backend and using Java Script and HTML and maybe PHP I hope to out date AWStats.

ISPMan is a system to design massive ISPs using LDAP as the backend. ISPMan provides a web front end and a command line interface to create virtual domains and manages users, dns information, email infos and httpd setup data for these vhosts.

pLsearch was created to assist System Administrators in their quest for grep'ing logs and other files for specific content, and then spitting it out in a format that is generally easy on the eyes.

serverM is an extremely flexible signature-based host-based intrusion detection system (HIDS). Running as a Perl daemon, it uses little CPU, and is capable of detecting a wide range of intrusions. Signature language is powerful and alarm options varied.

Remote analyse of servers. OS for Servers: 1st Step: UX (primary linux) Analysing Logfiles (syslog, every other logfile, free customize) Analysing Quotas, Free Space, Processes, Connected Users Central Server for collecting this Information and Displ