I dont do much of this type of function here....But I know that the guys that do, use a program called Snort for intrusion detection.

http://www.snort.org/