http://blog.itpub.net/21507458/viewspace-1111587/http://searchitchannel.techtarget.com/tip/Detect-events-without-Snort-IDS-rules