Stack Exchange network consists of 183 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
I have some linux server with iptables and I'm looking for an offline tool that allow log analysis to detect suspicious activity .
I dont think that installing a web tool is a good choice beacause it's another possible hole in the system so I'm looking for an offline one that generate human-readable summary.
This is really a shopping question, but might be salvageable. The bigger problem is you haven't really defined your requirements well enough for us to give you an answer -- Immediate questions that spring to mind: Are you looking for a command-line tool (what it sounds like)? What kind of "suspicious activity" do you want to look for? What kinds of logs do you want to crunch? -- If you can clarify your question I'll reopen it and see if we can get you some answers...
