etherpoke is a scriptable network session monitor.

etherpoke defines two events: SESSION_BEGIN, SESSION_END 
to which a hook (system command) can be assigned. The event 
hook can be any program installed in the system.