Scan Detection: A Data Mining Approach
Snort - Lightweight Intrusion Detection for Networks