Computer software that may be downloaded from a computer network for use in collecting, archiving, correlating, monitoring, analyzing, alerting and reporting on event data from firewalls, VPNs, and proxy servers to help identify attack patterns, intrusions, protocol usage and bandwidth usage