Re: [m0n0wall] IDS or log watching utilities

From:	Chris Buechler <cbuechler at gmail dot com>
To:	Jeffrey Goldberg <jeffrey at goldmark dot org>
Cc:	Monowall Mailing List <m0n0wall at lists dot m0n0 dot ch>
Subject:	Re: [m0n0wall] IDS or log watching utilities
Date:	Thu, 7 Oct 2004 02:27:51 -0400

On Wed, 6 Oct 2004 15:29:24 -0700, Jeffrey Goldberg
<jeffrey at goldmark dot org> wrote:
> Hello,
> 
> I would like to know about what sorts of utilities exist for watching
> firewall logs as part of some sort of intrusion detection system.
> 

Swatch is pretty widely used and might be able to meet your requirements.  
http://swatch.sf.net

-Chris