GNU/LINUX NETSTAT
Sawmill is a GNU/Linux Netstat log analyzer (it also supports the 1021 other log formats listed to the left).
It can process log files
in GNU/Linux Netstat format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse GNU/Linux Netstat logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform GNU/Linux Netstat log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for GNU/Linux Netstat, generates reports for each field, and allows dynamic filtering on any combination of these fields:
| Field | | Internal Name |
|---|
| | date/time | | date_time |
| | hour of day | | hour_of_day |
| | day of week | | day_of_week |
| | protocol | | protocol |
| | local address | | local_address |
| | local port | | local_port |
| | foreign address | | foreign_address |
| | foreign port | | foreign_port |
| | state | | state |
| | PID | | pid |
| | service name | | service_name |
| | receive queue | | recv_q |
| | send queue | | send_q |
| | program name | | program_name |
| | reference count | | refcnt |
| | flags | | flags |
| | type | | type |
| | inode | | inode |
| | path | | path |
Sawmill stores the following numerical fields in its database for GNU/Linux Netstat, aggregating them and including them as columns in most reports:
| Numerical Field | | Internal Name |
|---|
| | events | | events |
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling GNU/Linux Netstat reports.
Sawmill also supports 1021 other log formats.
