/py-fw-log

Python IPTables/Firewalld Log Viewer

Primary LanguagePythonMIT LicenseMIT

Py Firewall Log Viewer

  • Python IPTables/Firewalld Console Log Viewer

Tables of Conents

General Information

  • A Python program to parse iptables or firewalld log files and present the information in a console table.
  • The Program provides a summary of IP address total hits.
  • The Program provides a summary of Ports total hits.
  • The Program provides DNS resolution of IP Addresses (Optional).

Usage

python3 py-fw-log.py -l <LogFile> -s <LinesToShow> -p <ignore_dpt> -d [DNS Lookup]

or

  • Follow the Linux command Alias setup documented in the setup section to use the following command.
pyfwlog -l <LogFile> -s <LinesToShow> -p <ignore_dpt> -d [DNS Lookup]

Screenshots

Example screenshot

Setup

  • Setup the project from source files;

    • Download and install Python >=3.10.5 from https://www.python.org/downloads/

    • Ensure Python is added to environment SYS Path.

    • Clone this repo to local file system. (i.e home directory)

      git clone https://github.com/dunneja/py-fw-log
      
    • Install deps from the provided requirements.txt file as per below;

      pip3 install -r requirements.txt
      
    • Linux Command Alias

      • Add the following to ~/.bashrc
      if [ -f ~/.bash_aliases ]; then
          . ~/.bash_aliases
      fi
      
      • Add the following to ~/.bash_aliases
      alias pyfwlog='python3 /home/username/py-fw-log/py_fw_log.py'
      
      • run source update
      source ~/.bashrc'
      
      • run pyfwlog -h for usage / options.

Notes

  • Supports IPV4/IPV6 IPTables or Firewalld log files.
  • Tested on ubuntu + iptables.
  • Tested on fedora + firewalld.