[PLUG] psad

[Keith Nasman]

Just came across psad (http://www.cipherdyne.org/).

"psad is a collection of three lightweight system daemons (two main
daemons and one helper daemon) that run on Linux machines and analyze
iptables log messages to detect port scans and other suspicious
traffic."

Anyone using this actively? Opinions? Problems? Elations? Gotchas?

How does it fit into your security toolbag?

Thanks,
Keith