This is perhaps a bit OT, or blatent p1mp4ge....
Just to let you know about a new NIDS for Linux, its called firestorm,
you can check it out at http://www.scaramanga.co.uk/firestorm/index.html.
It boasts a very flexible plugin-based architecture and is pretty similar
to snort in terms of functionality (some things it does better, a few
things it doesn't do). The latest version is 0.1.6.
* Multi-threaded capture from libpcap live capture, tcpdump files, and
linux firewall netlink (ala fwmon).
* Plugin-based architecture
* Snort ruleset support
* Efficient, small codebase (~5,000 lines of C)
Anyway, you can read the docs for yourselves if you're interested ;)
I'm basically looking for comments, opinions and of course people to help
Zwei erdnusse gingen hinunter die strasse.
Man wurde angegriffen... erdnuss