Deterministic, tamper-resistant record of every inbound and outbound connection with full PID/process attribution.
Logs rotate automatically at midnight and are preserved for 90 days (3 months).