Snort
Network intrusion detection system.
Snort is the longest-running open-source NIDS, originally developed at Sourcefire (now Cisco). It uses a signature-rule language and is widely deployed on Linux for perimeter monitoring.
Install
See https://www.snort.org/downloads
