What's the best way to tap into eDirectory so that we can collect login and
logout events - and probably the user ip address as well?

We've got a mixture of NetWare 5.1 and OES/linux servers. We tried using
AUDITCON.EXE - but it also logged LDAP authentication for POP3, and quickly
ate up a lot of disk.

It looks like this subject hasn't been brought up in a while - but Nsure
Audit was mentioned as a possible solution last time. Is that still the
best method?