The audit trail plugin does not log any identifying characteristics of users who are not logged in. This can make it difficult to figure out who made a particular change. Currently, these changes get logged by the audit-trail plugin like so:

Aug 2, 2011 11:09:12 AM /configSubmit by ?
Aug 2, 2011 11:09:37 AM /configSubmit by ?

It would be an improvement if the audit-trail plugin logged the IP address when the username is unavailable, like so:

Aug 2, 2011 11:09:12 AM /configSubmit by 10.20.20.236
Aug 2, 2011 11:09:37 AM /configSubmit by 10.20.20.226