Where I work we track: mouse movements, how long you spend on a specific page, the path that you took to get to a specific page, what you clicked, ip addresses, and basically all information included in the header of the request. We also screen shot everything from when you login to when you logout.