System and network administrators have traditionally monitored their systems through general tools such as intrusion detection and logfile analysis.