Re: Web log file analysis tool

[Jakub <evaver () gmail com>]

hey

i've used webalizer for some time now to, and im pretty happy with it,
but i already heard that i should move to
AWFFull

and from what i see there is quite few reasons why i would do that...
so maybe "AWFFull" is also worth trying out...


Maslowski

2008/6/3 Breno BF <breno () lagosnet com br>:
> Hi,
>    I recommend webalizer[1]. IMHO that's a good log file analysis
> tool. Available for IIS, Apache, et cetera.
>
> 1. http://www.mrunix.net/webalizer/
>
> Regards,
>    Breno BF
> Att,
> Breno Brand Fernandes
> ----- Original Message -----
> From: "Anja Hofmann" <anja.hofmann () ub uni-tuebingen de>
> To: <security-basics () securityfocus com>
> Sent: Tuesday, June 03, 2008 7:37 AM
> Subject: Web log file analysis tool
>
>
> | Hi!
> | Currently, I'm looking for a web log file analysis tool which does
> not
> | cause too much traffic/load on our LAMPP web servers.
> | I've tried hobbit monitor (http://*hobbit*mon.sourceforge.net), but
> was
> | disappointed, since the script I needed to search for suspicious
> | patterns (bb-msgs.pl) was not part of the main package.
> | I've also installed awstats (http://awstats.sourceforge.net/) which
> uses
> | worms.pm to look for suspicious windows worms.
> | However, I would love to find a plugin for awstats (or another
> program)
> | that could also detect XSS attempts - as far as this is possible
> using
> | only Apache log files.
> | Thank you very much in advance.
> | Yours sincerely,
> | Anja Hofmann
> |