Build me a tool which can show attackers ip address

My project is network attacks and digital forensics in which I have used 2 system one Ubuntu (victim) another Kali (attacker)... Once the primary attacks like dos, u2r, r2l, probe are performed the symptoms are stored in victim's log through that I have to extract information and show what is the attackers ip address and which attack took place.