Woodchuck
Submitted by dmuth on Sat, 2006-01-07 21:32.
Software
This utility parses logfiles from any UNIX system, and prints out any lines which don't fit into user-defined regular expressions. That way, anything out of the ordinary will be printed. Great for discovering unusual activity on a system.
The recommended way of using this program is running it from cron on a daily basis and e-mailing the output to the system admin who can then look at the unusual entries in more detail. The crontab might look like:
30 4 * * * /usr/local/bin/woodchuck |mail -s "Unusual logfile entries" root@host
This is written in Perl.
delicious
digg
reddit
newsvine
furl
google
yahoo
technorati