Warning: session_start(): open(/tmp/sess_m3f6c6vtcbbgs7t7t2j6lr8rq5, O_RDWR) failed: No space left on device (28) in /www/H01/htdocs/lib/base/lib_base.php on line 280
KLogWatch openDesktop.org


	KDE-Apps.org Applications for the KDE-Desktop GTK-Apps.org Applications using the GTK Toolkit GnomeFiles.org Applications for GNOME MeeGo-Central.org Applications for MeeGo CLI-Apps.org Command Line Applications Qt-Apps.org Free Qt Applications Qt-Prop.org Proprietary Qt Applications Maemo-Apps.org Applications for the Maemo Plattform Java-Apps.org Free Java Applications eyeOS-Apps.org Free eyeOS Applications Wine-Apps.org Wine Applications Server-Apps.org Server Applications apps.ownCloud.com ownCloud Applications


	KDE-Look.org Artwork for the KDE-Desktop GNOME-Look.org Artwork for the GNOME-Desktop Xfce-Look.org Artwork for the Xfce-Desktop Box-Look.org Artwork for your Windowmanager E17-Stuff.org Artwork for Enlightenment Beryl-Themes.org Artwork for the Beryl Windowmanager Compiz-Themes.org Artwork for the Compiz Windowmanager EDE-Look.org Themes for your EDE Desktop


	Debian-Art.org Stuff for Debian Gentoo-Art.org Artwork for Gentoo Linux SUSE-Art.org Artwork for openSUSE Ubuntu-Art.org Artwork for Ubuntu Kubuntu-Art.org Artwork for Kubuntu LinuxMint-Art.org Artwork for Linux Mint Arch-Stuff.org Art And Stuff for Arch Linux Frugalware-Art.org Themes for Frugalware Fedora-Art.org Artwork for Fedora Linux Mandriva-Art.org Artwork for Mandriva Linux


	KDE-Files.org Files for KDE Applications OpenTemplate.org Documents for OpenOffice.org GIMPStuff.org Files for GIMP InkscapeStuff.org Files for Inkscape ScribusStuff.org Files for Scribus BlenderStuff.org Textures and Objects for Blender VLC-Addons.org Themes and Extensions for VLC


	KDE-Help.org Support for your KDE Desktop GNOME-Help.org Support for your GNOME Desktop Xfce-Help.org Support for your Xfce Desktop

openDesktop.org: Applications Artwork Linux Distributions Documents Linux42.org OpenSkillz.com

KLogWatch

2.0.3

KDE Logging/Monitoring

Score 81%

jstamp

Link: Link
Downloads: 3789

Submitted: Jan 28 2004
Updated: Dec 18 2006

Description:

KLogWatch sits in the system tray and monitors a kernel log file for Netfilter (ie. iptables) log lines. Clicking on the System Tray icon opens up a window with a history of all the logged packets. Users can then perform basic operations on the packet information (whois, traceroute, host, etc.).

Changelog:

Version 2.0.3:
Do proper column sorting on addresses and ports.

Version 2.0.2:
Be sure to save config when a session closes
Add ping command
Actually use dest IP address when doing traceroute on dest IP
Allow use of $(DESTDIR) during installation. Thanks to Tiziano Mueller for the initial patch.

Version 2.0.1:
Fixed error message reporting of an invalid logfile

Version 2.0:
New features:
* New columns to account for all netfilter log info
* Select which columns to see
* Column size and order saved
* Window size and position saved
* Right mouse button actions
* Adjustable print font
* Can now print/save window contents or raw log messages

Changes:
* Some code cleanups; more on the way
* Changing configuration does not require restart
* Desktop file installed automatically
* Removed popup on alert action; all alerts appear in the tray
* Debian package files and RPM spec file included

Version 1.8.4:

Fixed bug in Save As option
New cleaner icons
Added uninstall make target

Version 1.8.3:

Corrected to work properly when log-rotation occurs
Use proper KDE config file location
(Copy your ~/.klogwatch to ~/.kde/share/config/klogwatchrc).
Don't scroll down to new packets if window already visible

Version 1.8.2:

Corrected "parsed == false" assertion failure on startup under latest KDE versions.

Version 1.8.1:

Fixed SIGABRT Mandrake problem where /var/log/kernel is a directory

Version 1.8:

Fixed the autoconf system for Fedora/Mandrake/Debian
Added sort by destination port
Lookup protocol numbers in /etc/protocols to give names

License: GPL

Source

(klogwatch-2.0.3.tar.gz)

Send to a friend
Subscribe
Other Content from jstamp
Report inappropriate content

goto page:

1 2

Snort?

by starseeker on: Dec 18 2004

Score 50%

starseeker

Apologies if this is off topic, but is there any chance this app could support snort's analysis of potential attacks, or in some other fashion alert the user if a potential attack is detected? I'm thinking klogwatch would be the perfect tool to combine with guarddog and whatever other security tools are appropriate and create a clone of the Zonealarm experience. Is this possible?

Reply to this

Re: Snort?

by nickbattle on: Dec 21 2004

Score 50%

nickbattle
Home

Technically, this probably would be possible, but it's a very different task to the one KLogWatch is currently doing - at the moment, it is simply displaying intercepted packets. There is no attempt to interpret the packets or look for patterns of activity that might indicate an attack.

Cheers,
-nick
Reply to this

Re: Snort?

by mattepiu on: Sep 27 2005

Score 50%

mattepiu

Would be great, but this would need merging this project with a firewall configurator (eg: Kmyfirewall) and could
not, however, select which packet to allow
"on the fly" (since logging is done on dropped packets...)

Reply to this

Remote support

by EliasP on: Jul 26 2006

Score 50%

EliasP

It would be nice to have remote support included, so I could watch the logfiles on my servers.

Reply to this

Re: Remote support

by nickbattle on: Jul 26 2006

Score 50%

nickbattle
Home

Yes, I can see how that would be useful. But I'd need to build some sort of remote protocol into klogwatch - really that should be done "outside".

I've not tried, but it should work via an NFS mount. The program itself only knows about a "file" that contains the logs.

Cheers,
-nick
Reply to this

Re: Re: Remote support

by EliasP on: Jul 26 2006

Score 50%

EliasP

I thought about doing this using NFS, too.
But that's too unsecure for some environments. Maybe you find a solution using the KDE kio SSH (fish) implementation.

Regards,

Elias P.

Reply to this

Re: Re: Re: Remote s

by nickbattle on: Jul 26 2006

Score 50%

nickbattle
Home

I'll look into this. Presumably it should be possible to set up some sort of ssh tunnel - I just don't know enough about it to say. Thanks for the suggestion anyway.

Cheers,
-nick
Reply to this

Re: Re: Re: Remote support

by jstamp on: Jul 27 2006

Score 50%

jstamp

Going through the fish kioslave was my first thought too, but I don't know off the top of my head how well it would work to stat and tail a remote file like that.

How do you currently do remote logging? There's info out there about how to set up syslog or syslog-ng to securely receive remote log events. I haven't tried it, but I suspect that klogwatch would be able to pick up those alerts in that kind of setup.

Reply to this

Fonts

by papa on: Aug 3 2006

Score 50%

papa

Could you tell me the name of those fonts, which are appear on the setup's pictures?

Reply to this

Re: Fonts

by nickbattle on: Aug 3 2006

Score 50%

nickbattle
Home

The font in the sample pictures is called "Misc Fixed" (12pt). I don't know where it came from, but I'm using SuSE 10.1 and I believe it came with the distro.

Fixed fonts are nicer for klogwatch because thnigs like IP addresses line up.

HTH,
-nick

Reply to this

v2.0.1 SLED 10

by pupil on: Sep 21 2006

Score 50%

pupil
-
Home

RPM for SLED 10:
http://donnie.110mb.com/downloads.php?cat_id=2

For GPG key, please look at the front page of my site.

http://donnie.110mb.com
Reply to this

v2.0.2 SLED 10

by pupil on: Sep 30 2006

Score 50%

pupil
-
Home

RPM updated to v2.0.2

http://donnie.110mb.com
Reply to this

Re: v2.0.2 SLED 10

by jstamp on: Sep 30 2006

Score 50%

jstamp

We also have an rpm available on the SourceForge site. Nick compiled that one on Suse 10.1, I think.

Best,
John

Reply to this

Re: Re: v2.0.2 SLED

by nickbattle on: Oct 1 2006

Score 50%

nickbattle
Home

Yes, my RPM was built on SUSE 10.1. It's probably very similar to the SLED one though.

Cheers,
-nick
Reply to this

Nice one!

by TrashOverride on: Jan 19 2008

Score 50%

TrashOverrid e
Home

just the thing i was looking for.
One question though, it says that /var/log/kernel is not found (and i dont have it). I tried dmesg, messages.1, syslog.1, but none when they are loaded nothing is shown...
i'm using slackware 12, kernel 2.6.23.12, kde 3.5.7

Reply to this

Re: Nice one!

by TrashOverride on: Jan 19 2008

Score 50%

TrashOverrid e
Home

Never mind the last one, FIXED.
i used syslog.1 instead of syslog.

Reply to this

goto page:

1 2

Add commentBack

Linux42.org

ask question
more

Popular Groups

Desktop Screenshots

Newest Groups

Elementary OS

Nahuatl language

FORUM

Who we are
Contact
More about us
Frequently Asked Questions
Register
Twitter
Blog

Explore
Apps
Artwork
Jobs
Knowledge
Events
People
Updates on identi.ca
Updates on Twitter
Content RSS
Events RSS

Participate
Groups
Forum
Add Content
Public API

About openDesktop.org
Legal Notice
Spreadshirt Shop
CafePress Shop
Advertising
Sponsor us
Report Abuse

Copyright 2007-2016 openDesktop.org Team
All rights reserved. openDesktop.org is not liable for any content or goods on this site.
All contributors are responsible for the lawfulness of their uploads.
openDesktop is a trademark of the openDesktop.org Team

KLogWatch

KDE Logging/Monitoring

KLogWatch sits in the system tray and monitors a kernel log file for Netfilter (ie. iptables) log lines. Clicking on the System Tray icon opens up a window with a history of all the logged packets. Users can then perform basic operations on the packet information (whois, traceroute, host, etc.).

Snort?

Re: Snort?

Technically, this probably would be possible, but it's a very different task to the one KLogWatch is currently doing - at the moment, it is simply displaying intercepted packets. There is no attempt to interpret the packets or look for patterns of activity that might indicate an attack.

Re: Snort?

Would be great, but this would need merging this project with a firewall configurator (eg: Kmyfirewall) and could not, however, select which packet to allow "on the fly" (since logging is done on dropped packets...)

Remote support

It would be nice to have remote support included, so I could watch the logfiles on my servers.

Re: Remote support

Yes, I can see how that would be useful. But I'd need to build some sort of remote protocol into klogwatch - really that should be done "outside". I've not tried, but it should work via an NFS mount. The program itself only knows about a "file" that contains the logs.

Re: Re: Remote support

I thought about doing this using NFS, too. But that's too unsecure for some environments. Maybe you find a solution using the KDE kio SSH (fish) implementation. Regards, Elias P.

Re: Re: Re: Remote s

I'll look into this. Presumably it should be possible to set up some sort of ssh tunnel - I just don't know enough about it to say. Thanks for the suggestion anyway.

Re: Re: Re: Remote support

Fonts

Could you tell me the name of those fonts, which are appear on the setup's pictures?

Re: Fonts

The font in the sample pictures is called "Misc Fixed" (12pt). I don't know where it came from, but I'm using SuSE 10.1 and I believe it came with the distro. Fixed fonts are nicer for klogwatch because thnigs like IP addresses line up. HTH, -nick

v2.0.1 SLED 10

RPM for SLED 10: http://donnie.110mb.com/downloads.php?cat_id=2 For GPG key, please look at the front page of my site.

v2.0.2 SLED 10

RPM updated to v2.0.2

Re: v2.0.2 SLED 10

We also have an rpm available on the SourceForge site. Nick compiled that one on Suse 10.1, I think. Best, John

Re: Re: v2.0.2 SLED

Yes, my RPM was built on SUSE 10.1. It's probably very similar to the SLED one though.

Nice one!

just the thing i was looking for. One question though, it says that /var/log/kernel is not found (and i dont have it). I tried dmesg, messages.1, syslog.1, but none when they are loaded nothing is shown... i'm using slackware 12, kernel 2.6.23.12, kde 3.5.7

Re: Nice one!

Never mind the last one, FIXED. i used syslog.1 instead of syslog.

Would be great, but this would need merging this project with a firewall configurator (eg: Kmyfirewall) and could
not, however, select which packet to allow
"on the fly" (since logging is done on dropped packets...)

Yes, I can see how that would be useful. But I'd need to build some sort of remote protocol into klogwatch - really that should be done "outside".

I've not tried, but it should work via an NFS mount. The program itself only knows about a "file" that contains the logs.

I thought about doing this using NFS, too.
But that's too unsecure for some environments. Maybe you find a solution using the KDE kio SSH (fish) implementation.

Regards,

Elias P.

The font in the sample pictures is called "Misc Fixed" (12pt). I don't know where it came from, but I'm using SuSE 10.1 and I believe it came with the distro.

Fixed fonts are nicer for klogwatch because thnigs like IP addresses line up.

HTH,
-nick

RPM for SLED 10:
http://donnie.110mb.com/downloads.php?cat_id=2

For GPG key, please look at the front page of my site.

We also have an rpm available on the SourceForge site. Nick compiled that one on Suse 10.1, I think.

Best,
John

just the thing i was looking for.
One question though, it says that /var/log/kernel is not found (and i dont have it). I tried dmesg, messages.1, syslog.1, but none when they are loaded nothing is shown...
i'm using slackware 12, kernel 2.6.23.12, kde 3.5.7

Never mind the last one, FIXED.
i used syslog.1 instead of syslog.