Honeycomb: creating intrusion detection signatures using honeypots
Snort - Lightweight Intrusion Detection for Networks