PUTS (PHP Ulog Traffic Statistics) available

radudi · n00b Joined: 29 Mar 2004 Posts: 33

PUTS is a spare time simple project and basicaly the name says what it is all about: a collection of simple PHP scripts that parse data dumped by Ulogd into Mysql. The result are some nice tables with statistics (ip-based and protocol-based) directly in your favourite web-browser.
We use these scripts for packets dropped by netfilter and this way we can easily see a statistics of what packets are being dropped. We previously used the LOG target from iptables which 'flooded' our syslogs, making them hard to read. This is why we created these simple scripts, but you could use them for any kind of traffic dumped by Ulogd (not just dopped packets).

If you want more information please visit the home-page:

http://www.nexor.ro/software/freesoft_en.php

Or if you just want to download it here's the direct url for the current version:

http://www.nexor.ro/software/puts-0.2.tar.bz2

Version 0.2 contains major improvements (and probably more bugs

)

MaxDamage · Posted: Thu Apr 21, 2005 11:14 am Post subject:

I'm going to try it. At the moment I'm using psad for port scan detection, and also darkstat made pretty cool graphics, but eated a lot of resources.
_________________
La PDA de tungsteno

radudi · n00b Joined: 29 Mar 2004 Posts: 33

I see that not many people are interested in that kind of script. Anyway, we produced a new version 0.2 which contains major improvements (and probably more bugs:)). The urls are in the first post.
The first version produced a list of ips and by selecting an ip it produced a list of ports. Version 0.2 is able to produce also a list of protocols or ports and by selecting a protocol or port it produces a list of ips. We also added some ICMP information.
It is useful for us, if not for anyone else

soulwarrior · Guru Joined: 21 Oct 2002 Posts: 331

I just tried out PUTS 0.2 but it doesn't seem to work. I get "unknown column time in the where clause" as an error message. Indeed I couldn't find a column named "time" in the mysql table file from ulog 1.02.

rahvin · n00b Joined: 31 Oct 2005 Posts: 1

Getting the same error at the top of the sheet...

Unknown column 'time' in 'where clause'

Would really like to try it but can't use it as current...