Daemon that scans program outputs for repeated patterns, and takes action. Common usage is to scan ssh and webserver logs, and to ban hosts that cause multiple authentication errors.