etherpoke is a scriptable network session monitor. It defines two events, SESSION_BEGIN and SESSION_END, to which a hook (system command) can be assigned. The event hook can be any program installed in the system. SESSION_BEGIN is triggered when the first packet with an Ethernet source address matching the filter is captured. SESSION_END is triggered when the time since the last captured packet with an Ethernet source address matching the filter exceeds the session timeout.
