I’m installing Snort this week at work. We’ll start getting reports back of who is doing what to our systems.

It’s about time.

Speaking of IDS, even logcheck is a good start. I installed it on the New Orleans Jazzfest mail server and the guy who takes care of it is quite pleased with the updates.