Software Map

Jailkit is a set of utilities to allow quick creation of
limited user accounts in a chroot jail. It contains a safe logging daemon, shells that can restrict users, utilities to start daemons in a chroot jail, and utilities for easy setup of chroot jails.

fireparse is an ADMLogger plugin that emails a report of all packets that have been logged by the kernel's packet filtering subsystem (iptables/netfilter
or ipchains). The report includes source and destination ports, direction, logged packet count, matched rule, and fully resolved host names (if
available). The email report can be formatted to plain text or a colored HTML table.

Logcheck parses system logs and generates email
reports based on anomalies. Anomolies can be
defined by users with 'violations' files. It
differentiates between 'Active System Attacks',
'Security Violations', and 'Unusual Activity', and is
smart enough to remember where in the log it
stopped processing to improve efficiency. It can
also warn when log files shrink, and does not report
errors when they are rotated.

The Logfile Navigator, lnav for short, is a curses-based tool for viewing and analyzing log files. The value added by lnav over text viewers or editors is that it takes advantage of any semantic information that can be gleaned from the log file, such as timestamps and log levels. Using this extra semantic information, lnav can do things like interleaving messages from different files, generate histograms of messages over time, and provide hotkeys for navigating through the file. These features are meant to allow the user to quickly and efficiently focus on problems.

ProcMeter3 is a program for monitoring the system status and other information and displaying it in a series of graphs or as text. Most of the information comes from the /proc filesystem (cpu usage, load average , processes information, memory usage, network traffic, interrupts etc.). Other information is available for other sources (date, time, email status, log file length, disk status etc.). The program is modular and highly configurable.

Beobachter is a file monitor, usually used to
watch log files. It has a Java Swing interface
that allows the user to customize the highlighting
of the logs depending on the log type. It is a
very simple, multi-platform, fast, and practical
tool.

Lilith is a logging and access event viewer for
the Logback logging framework. It has features
comparable to Chainsaw, a logging event viewer for
log4j. This means that it can receive logging
events from remote applications using Logback as
their logging backend. It uses files to buffer the
received events locally, so it is possible to keep
vast amounts of logging events at your fingertip
while still being able to check only the ones you
are really interested in by using filtering
conditions.

CCZE is a robust and modular log colorizer with plugins for apm, exim, fetchmail, httpd, postfix, procmail, squid, syslog, ulogd, vsftpd, xferlog, and more.

RLog provides a flexible message logging facility
for C++ programs and libraries. It is
subscription based, meaning you can subscribe to
messages of your choice in an number of ways: by
hierarchical channel name (e.g. "debug", "debug/
special", "error", etc.), or filename, component
name, etc. Log messages are individually enabled.
It is meant to be fast enough to leave in
production code - even where it may be called
many times, as both the GCC and Intel compilers
reduce the logging overhead a few clock cycles if
they are dormant (with no subscribers). Other
add-on components can extend subscriptions to
external programs, allowing you to enable and
collect debugging messages remotely.

Lire is a pluggable log analyzer. It has analyzers for over 25 log file formats, ranging from Apache WWW log files to iptables firewall logs and CUPS printing logs. Reports are generated in 9 different output formats, ranging from Excel 95 to PDF to HTML, optionally with included graphs.