hi if you need somthing like that ... try ossec
www.ossec.net holger > Hi, > > I use OpenBSD 4.9, i'm looking for a good nids. > > I found > "scanlogd" in ports, works very well. > > But is there a way to work this > last one with pf ? For example add the ip-address detected by scanlogd to > a > "Blacklist" table ? > > Also, is there a way to have a web monitor to view > alert? > > Perhaps, you use something else ... what ? ;-) snort ? > > Thank you > very much ! > > All the best, > > Wesley.

