• source and destination IPs, ports and protocols
• interface
• direction
• hit count
• iptables rule
• resulting action
• fully resolved host name

OVERVIEW
========
I use the ISC DHCPd daemon to manage IPs on my home network. My wireless hub
supposedly filters at the MAC level, but just in case I do have some security
measures. A quick and easy way to see if unauthorized MAC addresses are on my
network is to see if unauthorized MACs are requesting IP addresses. My DHCP
setup file has hard coded MAC <==> IP pairs, as shown:

   host mokushi {
     hardware ethernet 00:11:22:33:44:55;
     fixed-address 192.168.0.1;
   }

   host apocalypse {
#     hardware ethernet 00:11:22:33:44:66; # Realtek 8139
     hardware ethernet 00:11:22:33:44:77; # nVidia nForce
     fixed-address 192.168.0.2;
     # 14 DAYS for desktop systems
     max-lease-time 1209600;
     default-lease-time 1209600;
   }

OVERVIEW
========
This plugin simply checks to see who has issued the 'su' command and compares
the list to known 'good' user names.        

OVERVIEW
========
I share a few files regularly with some friends on a private FTP server. I
run PureFTP and this program will email me daily reports telling me who is
downloading what, when somebody has uploaded something new, etc. It also
tells me their throughput which is nice to know.

If it encounters a line that it does not understand, it will put it in the
email message sent.

OVERVIEW
========
This plugin is named to be the last executed on the log file. In it are a set
of Perl Regular Expressions (don't worry yet) that contain lines that show
up in your system log that you really don't care about hearing. The use of
this plugin is considered ADVANCED - please do NOT use it unless you are
fairly sure you know what you are doing.  

To: user@isp.net
Subject: Automated Network Checks Report 

Last month, there were 64.25 hours of downtime out of 720 possible hours.
(There were only 2692 out of 2880 possible samples made.)
Last month's ratio was 0.089 so your bill should be $45.53.

--------------------------------------------------------------------------------

1 : 2 hr
2 : 22 hr
3 : 0.5 hr
4 : 1.25 hr
5 : 1.75 hr
6 : 0.25 hr
7 : 0.25 hr
8 : 0.25 hr
9 : 1.25 hr
10 : 3.25 hr
11 : 1.25 hr
13 : 0.25 hr
14 : 1.75 hr
15 : 0.25 hr
16 : 0.75 hr
17 : 0.75 hr
18 : 8.5 hr
19 : 0.75 hr
20 : 11.5 hr
21 : 0.75 hr
22 : 0.75 hr
23 : 1.75 hr
24 : 2 hr
25 : 0.25 hr
27 : 0.25 hr

If these programs were required to read a configuration file, parse it, and then verify the options EVERY TIME THEY RAN, it would end up being some serious wasted processor time.