Sawmill is a GNU/Linux Netstat log analyzer (it also supports the 1020 other log formats listed to the left).
It can process log files
in GNU/Linux Netstat format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse GNU/Linux Netstat logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform GNU/Linux Netstat log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for GNU/Linux Netstat, generates reports for each field, and allows dynamic filtering on any combination of these fields:
|Field|| ||Internal Name|
| ||date/time|| ||date_time|
| ||hour of day|| ||hour_of_day|
| ||day of week|| ||day_of_week|
| ||protocol|| ||protocol|
| ||local address|| ||local_address|
| ||local port|| ||local_port|
| ||foreign address|| ||foreign_address|
| ||foreign port|| ||foreign_port|
| ||state|| ||state|
| ||PID|| ||pid|
| ||service name|| ||service_name|
| ||receive queue|| ||recv_q|
| ||send queue|| ||send_q|
| ||program name|| ||program_name|
| ||reference count|| ||refcnt|
| ||flags|| ||flags|
| ||type|| ||type|
| ||inode|| ||inode|
| ||path|| ||path|
Sawmill stores the following numerical fields in its database for GNU/Linux Netstat, aggregating them and including them as columns in most reports:
|Numerical Field|| ||Internal Name|
| ||events|| ||events|
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling GNU/Linux Netstat reports.
Sawmill also supports 1020 other log formats.