John Hinton wrote:
... There does seem to be flexibility among these three systems in having the ability to monitor just about any log system and take action based on failed logins for instance.
So, whats the word from the list? Pros cons or other directions?
I've always been rather fond of labrea (http://labrea.sourceforge.net/labrea-info.html) and portsentry (http://sourceforge.net/projects/sentrytools/), you might give them a gander.