[mattwdelong]

Check out http://OSSEC.net, its a host based intrusion detection system. It does everything you described and more. I am slowly working on a better Web UI with real time alerts.

[ericd]

Wow, that looks great. Any idea how it compares to the other tools mentioned? (tripwire, portsentry, logwatch)