Hi.. Well that just depends on what service you're refering to? There is a bunch of them out there. Personally I prefer ACID(http://acidlab.sourceforge.net) for Snort and Fireparse(http://aaron.marasco.com/linux.html) for Iptables. The best way to find out yourself is to look at http://www.freshmeat.net and see for yourself, thereby get your own opinion.
// Regards Mattias Hedenskog > id 76DA3A30C4; Mon, 2 Dec 2002 12:35:35 -0700 (MST) -- irc:tsixla@efnet,irscnet mail:[EMAIL PROTECTED] http://tsixla.antisec.net g33kcode: AFA0 72DE 73FC F871 7C5F 332D E625 26DB 5025 2057