One of my pet (a.k.a. procrastination) projects has been to visualize my server logs using Google Maps. In fact, this has been my ‘procrastination hub’ giving me excuses to work on a variety of pet projects, including:
- playing with Bro and packaging Bro for Debian
- playing with Apache logs and importing them to the relational database
- playing with Bro logs and importing them to the relational database
- learning Python and Javascript
- playing with Google Maps
- writing a web application to visualize the collected logs on Google maps
- creating a webpage documenting all the above.
As with procrastination projects, they are by definition never complete. I do have something working now, and you can see it in action (works best in a decent browser, but should show something in IE as well).
GeoWebStats
Visualizing Apache logs on a webpage. Here are three links (it might take a while to load them for the first time, so please be patient):
The script is quite customizable (for example you can specify the regular expressions you want to filter on, group stuff) but for security resons those demo links are locked.
GeoBroStats
Simiarly to GeoWebStats, GeoBroStats visualizes raw TCP/UDP conections based on Bro conection summaries (this might also take a while to load):
The script is also quite customizable, but for security resons those demo links are locked.
Let me know what you think about it. I know that the user interface is very crude and needs some work. I have also almost finished GeoWebStat’s website, but knowing me, it will take a while 