Preface

part of my-snort.org - but we are extremely busy - no more time for serious snorting!
"if u are still ignoring your firewall logs, you are not ready for IDS" - mjr 
"it doesn't matter how real-time your IDS is if you don't have real-time system administrators" - mjr
is ids dead ?
i won't cover bro, shadow, prelude, emerald and such!
i won't go into detail of snort - time constraint!