Flow-based SSH intrusion detection system (NfSen plugin)