I've been getting some spurious connection requests from some IP addresses, but they're not showing up in mslogon.txt -- perhaps because they never attempt a password? Either way, it'd be great if one of the logs at least showed every TCP/IP connection, even if there's no VNC connection.
The other request is probably easier to implement -- could we get some zero padding on the dates and times so we can open the logs as a fixed-width spreadsheet or database?
If that doesn't break compatibility with something, it would also have the effect of making the logs more human-readable, because it'd be easier to for a person to scan the logs as distinct columns with no ragged edges.