Py Firewall Log Viewer

Python IPTables/Firewalld Console Log Viewer

Tables of Conents

General Info
Usage
Screenshots
Setup
Notes

General Information

A Python program to parse iptables or firewalld log files and present the information in a console table.
The Program provides a summary of IP address total hits.
The Program provides a summary of Ports total hits.
The Program provides DNS resolution of IP Addresses (Optional).

Usage

python3 py-fw-log.py -l <LogFile> -s <LinesToShow> -p <ignore_dpt> -d [DNS Lookup]

or

Follow the Linux command Alias setup documented in the setup section to use the following command.

pyfwlog -l <LogFile> -s <LinesToShow> -p <ignore_dpt> -d [DNS Lookup]

Screenshots

Setup

Setup the project from source files;
- Download and install Python >=3.10.5 from https://www.python.org/downloads/
- Ensure Python is added to environment SYS Path.
- Clone this repo to local file system. (i.e home directory)
```
git clone https://github.com/dunneja/py-fw-log
```
- Install deps from the provided requirements.txt file as per below;
```
pip3 install -r requirements.txt
```
- Linux Command Alias
  - Add the following to ~/.bashrc
```
if [ -f ~/.bash_aliases ]; then
    . ~/.bash_aliases
fi
```
  - Add the following to ~/.bash_aliases
```
alias pyfwlog='python3 /home/username/py-fw-log/py_fw_log.py'
```
  - run source update
```
source ~/.bashrc'
```
  - run pyfwlog -h for usage / options.

Notes

Supports IPV4/IPV6 IPTables or Firewalld log files.
Tested on ubuntu + iptables.
Tested on fedora + firewalld.