different sensors like snort or nepenthes, log files from hostapd etc. work mostly done before and during c2k6; initially discussed with reyk@ and sturm@ , help and inputs msf@ alek@; ok alek@