+* 157 - We have a script called d_zroot.pl which sends zephyr when root logins occur (and other similar events). This only works with syslog-ng; and we'd like to port to rsyslog. A nice self-contained project; you could even deploy it on your own server when you're done. **worked on by incematt**