BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection
Snort - Lightweight Intrusion Detection for Networks