Free web server log file analysis software for linux

Run a web server inside LAN is a simple script to run a WWW server inside a Local Area Network. Run a web server inside LAN script assume all iptables features are compiled statically in the kernel, or all modules are loaded.

Otherwise you may encounter some surprises trying to utilize the more featureful and creative commandlines that Ive come up with.

Sample:

#external and internal interfaces
EXT=eth0
INT=eth1

# clear everything, and create my cascading chains
iptables -F
iptables -N e0
iptables -N tcpin
iptables -N udpin

# e0 is the name of our chain for eth0
iptables -I INPUT -i $EXT -j e0

# OUTPUT Chain
iptables -A OUTPUT -o $EXT -j DROP -p icmp --icmp-type ! echo-request

# remote gnutella queries were really pissing me off one day
# iptables -A OUTPUT -o $EXT -j DROP -p tcp ! --syn --dport 6346
# iptables -A OUTPUT -o $EXT -j DROP -p tcp ! --syn --sport 6346

# $EXT Chain
# a single rule to accept SYN Packets for multiple ports (up to 15)
iptables -A tcpin -j ACCEPT -p tcp --syn -m multiport --destination-ports 873,993,995,143,80,113,21,22,23,25,53

# stateful connection tracking is wonderful stuff
# ESTABLISHED tcp connections are let through
# If we send a SYN out, the ACK is seen as RELATED
# then further communication is accepted by the ESTABLISHED rule
iptables -A e0 -j ACCEPT -m state --state ESTABLISHED
iptables -A e0 -j ACCEPT -m state --state RELATED

# certain ports I simply DROP
iptables -A tcpin -j DROP -p tcp --syn -m multiport --destination-ports 6346,139

# UDP rules...
iptables -A udpin -j DROP -p udp -m multiport --destination-ports 137,27960

# I run a DNS server, so we must accept UDP packets on port 53
iptables -A udpin -j ACCEPT -p udp -m state --state NEW --destination-port 53

# lets log NEW udp packets on ports 1024:65535, then let them through
iptables -A udpin -j LOG -p udp -m state --state NEW --destination-port 1024:65535 --log-level debug --log-prefix UDPNEW --log-ip-options
iptables -A udpin -j ACCEPT -p udp -m state --state NEW --destination-port 1024:65535

# lets log NEW tcp packets on ports 1024:65535, then let them through
iptables -A tcpin -j LOG -p tcp --syn --destination-port 1024:65535 --log-level debug --log-prefix TCPNEW --log-tcp-options --log-ip-options
iptables -A tcpin -j ACCEPT -p tcp --syn --destination-port 1024:65535

# lets log INVALID or NEW tcp packets on priveleged ports, then DROP
# (remember I have certain ACCEPT rules higher up the chain)
iptables -A tcpin -j LOG -p tcp -m state --state INVALID,NEW --destination-port 1:1023 --log-level warn --log-prefix TCPPRIV --log-tcp-options --log-ip-options
iptables -A tcpin -j DROP -p tcp -m state --state INVALID,NEW --destination-port 1:1023

iptables -A e0 -p tcp -j tcpin
iptables -A e0 -p udp -j udpin
iptables -A e0 -j LOG --log-level debug --log-prefix NETFILTER --log-ip-options -m state --state INVALID,NEW
iptables -A e0 -j DROP

# NAT Rules
# I run a web server inside...
iptables -t nat -A PREROUTING -p tcp -i eth0 --dport 80 -j DNAT --to-destination 192.168.1.4:80

DeniX Server OS is an independent Linux based distribution built from scratch by Denis Salmanovich. They aim to offer a user-friendly full-featured server operating system, pre-configured, well structured and easy to work with, and filled with the latest stable versions of Linux apps.
Its easy to install and configure. Every package is downloaded from the authors source and compiled when installed.
Main features:
- Domain Controller
- ADSL/CABLE Router (PPPoE)
- Network Firewall
- Anti Virus Gateway
- Anti Spam Gateway
- Mail Server (local & external) + Web Mail
- Calendar Sharing Support
- Network File Server
- DHCP Server
- TFTP BOOT Server
- WINS Server
- FTP Server
- VPN Server
- DNS Server
- DDNS Server
- MySQL Server
- HTTP Apache Server
- Remote Backup Solutions
- Remote control and administration
- Print Queue Server
- Proxy Server

Visitors is a very fast web log analyzer for Linux, Windows, and other Unix-like operating systems. It takes as input a web server log file, and outputs statistics in form of different reports. The design principles are very different compared to other software of the same type:
No installation required, can process up to 150,000 lines of log entries per second in fast computers (20MB/s with my log files average length).
Designed to be executed by the command line, output html and text reports. The text report can be used in pipe to less to check web stats from ssh.
Support for real time statistics with the Visitors Stream Mode introduced with version 0.3.
To specify the log format is not needed at all. Works out of box with apache and most other web servers with a standard log format (see the documentation for more information on the format).
Its a portable C program, can be compiled on many different systems. Binaries for Windows systems are in the Download section of this page.
The produced html report doesnt contain images or external CSS, is self-contained, you can send it by email to users.
Visitors is free software (and of course, freeware), under the terms of the GPL license. You dont need to pay to use it. Visitors is supported, if you want a custom version made directly by the original author for a modest price, contact me at antirez (at) invece.org. ISPs may take advantage of the high processing speed.
Main features:
- Requested pages.
- Requested images.
- Referers by hits and age.
- Unique visitors in each day.
- Page views per visit.
- Pages accessed by the Google crawler (and the date of googles last access on every page).
- Percentage of visits originated from Google searches for every day.
- Users navigation patterns (web trails).
- Keyphrases used in Google searches.
- User agents.
- Weekdays and Hours distributions of accesses.
- Weekdays/Hours combined bidimentional map.
- Month/Year combined bidimentional map.
- Visual path analysis with Graphviz.
- Operating systems, browsers and domains popularity.
- 404 errors.
Enhancements:
- This release adds an important bugfix in the unique visitors algorithm.
- The output is now nearer to reality (though unique visitors stats are always a guess without the use of a cookie).

The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems including UNIX and Windows NT. The goal of this project is to provide a secure, efficient and extensible server that provides HTTP services in sync with the current HTTP standards.
Apache has been the most popular web server on the Internet since April of 1996. The May 2003 Netcraft Web Server Survey found that 62% of the web sites on the Internet are using Apache, thus making it more widely used than all other web servers combined.
The Apache HTTP Server is a project of the Apache Software Foundation.

LiteSpeed web server is an Apache interchangeable, full-featured high performance, secure HTTP server specifically engineered from the ground up with security and scalability in mind.
LiteSpeed Web Server is engineered to be Apache interchangeable, which means LiteSpeed has all the flexibilities that Apache has, but in much faster manner, such as distributed configuration .htaccess support.
The most commonly used Apache modules have been implemented in LiteSpeed with similar functionality and configuration, but completely different design and implementation.
Currently, LiteSpeed uses Apache compatible configuration for .htaccess and URL rewriting and eventually LiteSpeed will be able to use Apaches configuration file directly. This makes your switching between Apache and LiteSpeed very easy and risk free.
LiteSpeed Web Server has superb performance. Our measurements shows that it is more than 6 times faster than Apache, beating other lightweight content accelerators, such as thttpd, boa and TUX when serving static content, plus up to 50% increase in PHP performance than that of Apaches mod_php and more than doubled CGI/Fast CGI performance.
When you compare LiteSpeed Web Server to highly regarded and highly priced Zeus Web Server, you will find a lot of things in common: similar architecture and similar feature set, including some of the advanced features like web administration interface, MS FrontPage support, URL Rewriting, .htaccess and LDAP authentication. The biggest difference is that LiteSpeed is much more affordable, actually, it could cost you nothing.
LiteSpeed Web Server is also a real-world proven high performance content accelerator, compression proxy, and application security gateway leveraged by its highly scalable, low latency proxy engine.
With the combination of ease of use, tight security, outstanding performance, scalability, and reliability, LiteSpeed Web Server is the ultimate web server you ever need!
Main features:
- Backward compatible with HTTP/1.0
- Chunked Transfer Encoding
- Basic Authentication (htpasswd and LDAP backend)
- Entity Tag
- Range/Multi-range Request
- Static and dynamic content compression(gzip)
- CGI/1.1
- Fast CGI
- PHP (through Fast CGI interface), compatible with third party PHP Accelerators.
- JSP/Servlet (interface to back-end Servlet engine)
- Transparent reverse proxy (interface to back-end web server, application server)
- URL Rewriting is fully compatible with Apaches configuration
- Supports content publishing with MS Frontpage client.
- Supports IP based and name based virtual hosting
- Apache compatible distributed per-directory Access Control and Authentication configuration
- High performance Secure HTTP (HTTPS): supports SSLv2, SSLv3 and TLSv1
- Access Control at server, virtual host and directory (context) level
- File system protection
- HTTP Authentication
- IP level throttling (Bandwidth and Request Rate)
- Comprehensive IP level connection accounting
- Hotlink protection
- Strict HTTP request checking
- Comprehensive protection for static files
- External application firewall for dynamic content
- CGI resources consumption limit
- CGI suEXEC excution and chroot
- Chroot whole server process[Professional Edition only]
- Watch dog and Instant recovery maximizes up-time
- Graceful shutdown, all requests in process will be completed.
- Runs completely in the user space, OS reliability is not affected
- CGI, Fast CGI and servlet engine run in standalone processes, the reliability of the web server is not affected by third party software.

Cheyenne Secure Web Server (SWS) is a comprehensive enterprise solution for Apache server. Cheyenne Secure Web Server combines http firewall, JAVA, PHP, PERL and a domain control system with Apache HTTPD platform.

Caravan Business Server is an extremely easy to use comprehensive development and deployment framework which has been used to build Enterprise wide, mission critical Web-based applications.
It includes, as a seamless integrated package, an easy to use Scripting Language, Search Engine, Database Engine, a Web Server and a Communication Server, which makes it a 1-Tier Architecture.
Caravan Business Server is currently available on Linux. Once an application is developed on any OS, the same can be simply redeployed on any other OS without making any changes.

Funnel Web Analyzer provides essential Web site visitor and traffic analysis.
Every person who visits your companys Web site leaves a trail behind. Your Web server logs their every action and you can use this information to help improve your business. Funnel Web Analyzer provides essential Web site visitor and traffic analysis. It measures everything from server load and referrals to visitor demographics and marketing ROI.
Funnel Web Analyzer helps you optimize your web site by allowing you to analyze how users interact with your site and helps you make informed decisions about what changes you can make to improve their experience.
- What are the demographics of my customers?
- How many unique customers do I have, and how many of these are repeat visitors?
- How long does a visitor spend on each page?
- Which streaming media files are most popular?
- What are my most popular pages?
- How successful was my banner advertisement in attracting visitors to my site?
- What are the peak periods of activity on my site?
- What downloads are most popular?
- What search terms are people using to find my site?
Comprehensive Visitor Analysis
Give your executives and managers unique insight into what your customers are really interested in. Analyzer generates more than 50 different reports and graphs in 12 different languages. Reports can even be customized to reflect your corporate identity and published in a variety of formats including PDF, HTML, Word and Excel.
Identify where users come from before they arrive at your site with the referrals report. This is a great way to measure the effectiveness of promotional campaigns, press releases and affiliate/partner programs. You can even generate separate advertising reports to measure the click-through rates of individual banner ad campaigns.
Funnel Web Analyzer is freeware and provides everything you need to quickly analyze the traffic on your Web site. With virtually no setup, you get an extensive set of valuable reports right from the start.