# SyslogListener Real-time syslog listener and log parser for firewall systems. Receives UDP syslog messages, classifies them by type, and extracts structured data for analysis. ## Features - **UDP Syslog Receiver** - Listens on port 514 for incoming syslog messages - **Log Classification** - Automatically categorizes logs (FilterDNS, DHCP, Filter rules) - **DHCP Parsing** - Extracts IP and MAC address mappings from DHCP acknowledgments - **Firewall Rule Parsing** - Decodes filter logs into structured data (source/destination IP, protocol, action, direction) - **IPv4 & IPv6 Support** - Handles both IP versions in firewall log entries ## Usage ```bash python Spectre.py ``` The listener binds to `0.0.0.0:514` and starts processing incoming syslog messages. ## How It Works 1. Receives raw syslog data via UDP socket 2. Decodes and normalizes log entries 3. Classifies logs by type (DHCP, filter, DNS) 4. Parses relevant fields into structured dictionaries 5. Outputs parsed data for further processing ## Tech Stack - Python 3 - Socket programming (UDP) - Regex-based log parsing