Snort 2.1 Intrusion detection - Northcutt, Stephen (Syngress, 2004)