I am running a Debian Squeeze VPS and need a good IDS. I have used snort before and it was quite good but i am wandering if there are any other good ones out there.

Preferably compatible with modsecurity.

  • Shopping questions are discouraged on all Stack Exchange sites as not constructive - answers will be subjective. – Rory Alsop May 10 '12 at 9:14

I personally prefer OSSEC. It is a free, open source tool backed up with commercial support.

| improve this answer | |

a lot of IDS tools are on the internet and one of them is Suricata and here are comparison between it and snort Suricata vs Snort and there a lot of others like security onion,Smooth-Sec ,Alienvault OSSIM .....etc

Also commerical versions are available

| improve this answer | |
