Great list. I’ve used smokeping in my early years with Linux to monitor my wan interface. It was great but I recently moved to uptimeKuma to monitor my internet and other docker apps.
I also used snort via pfsense but man, things were always being blocked, so I only placed it in monitoring mode 