Snort IDS and IPS toolkit - Beale, Jay (Syngress, 2007)