major cleanup for auditd_net

First time running against bro - big mess to clean up.
Added abs(double) -> double since it seems not to be in the core
install.