Jamie Wilkinson wrote:
Sounds like you want an IDS like snort or prelude:http://www.prelude-ids.org/ (winner of jaq's best artwork in an open source project 2005 award)
an alternative to this is ossim http://www.ossim.net which seems to do the same sort of thing. I might compare them (didn't know about prelude) dave -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html