An overview to Software Architecture in Intrusion Detection System
Snort - Lightweight Intrusion Detection for Networks