Log catch and analyze tool

RouterOS General
1

Hello everyone,

I’ve made for myself an application in java that can catch and analyze logs from Mikrotik web proxy. I could post it here (it’s made in 90% now) if someone is interested and it’s not forbidden?

2

You should post this on your own website (or even Github - if you want other to contribute to the source etc).

3

It is not forbidden to put here whatever useful. More than that, someone will surely welcome that.

4

You do not need to create all from ground up.
Look at my post using Splunk with MikroTik:
http://forum.mikrotik.com/t/using-splunk-to-analyse-mikrotik-logs/105668/1

5

Here is the link:
http://s000.tinyupload.com/?file_id=12590636005676441326

Archive contains two installers: Log Catcher Server and Client.

Server catches web proxy logs from Mikrotik. I placed in on a server running 24/7 in my network. Server saves logs to database (database rotation every day). I’ve tested it on Windows 10 and on Debian in command line (use --textmode switch to run without GUI). It was tested under Java 8.
Client collects and presents data saved by server.

  • You can view daily visit stat or visit by hour
  • Top users and top domains from selected period
  • You can view what specific user browsed
  • You can list users that visited specified domain.

I’ve made it for myself for my work if you find it helpful or find any bugs please send me feedback.

6

I’ve updated this tool. Added ability to catch VPN logs (PPTP and L2TP PSK), tested under Mikrotik RB1100Hx2 (Idk if other Mikrotik routers has same log format). Also fixed some bugs.
It’s now in single archive two folders with client and server, no installers.

Default server settings:
Http Proxy logs port: 514
VPN logs port: 515
Clients connecting on port: 2000

http://s000.tinyupload.com/?file_id=46362484515329954498

If it works for you or you’ve found some bugs please contact me.

7

can you please upload it once again ?


8

Why would you want to use someone else’s application written in Java?
It will be a waste of resources, and it is dangerous as well because you do not know what backdoors are hidden in all the beans.
(even when the writer of the application has no bad intentions)

9

Also do not add link to the forum. Click the Attachments below the post and add the file/picture to the post.
All your links are dead/down.