Suggestion for diag_logs_filter.php:

Instead of just

    return $ip . ", port " . $port;

it is helpful to include a link to info the port in question, e.g.

    return $ip . ", port <a href='http://isc.sans.org/ 
port_details.html?port=" . $port . "'>" . $port . "</a>";

Thanks,
Eric