ttyrpld is a multi-OS kernel-level TTY keylogger and screenlogger with (a)synchronous replay support. It runs on Linux, Solaris, FreeBSD, NetBSD and OpenBSD.
IP accounting tools package based on Berkeley Packet Filer mechanism. Continue from BPFT by V.Vorobyev, TRAFD by V.Belekhov & S.Svirid.
Use the PCAP library to implement connection to bpf kernel pseudo-device.
ProSum is a terminal based program that protects your files, sys_call_table and IDT like tripwire way (All in user space, without kernel modules) In addition, database with files etc. could be encrypted with Blowfish algorythm and more.
BCLF is the Binary Common Log Format, a fast, platform independent, streamable, compact logging format that resembles the Extended CLF logging format in content. The project goal is to make an Apache module and enhance the format without giving up speed.