Securing Your Server With A Host-based Intrusion Detection System | HowtoForge - Linux Howtos and Tutorials

This article shows how to install and run OSSEC HIDS, an Open Source Host-based Intrusion Detection System. It performs log analysis, integrity checking, rootkit detection, time-based alerting and active response. It helps you detect attacks, software misuse, policy violations and other forms of inappropriate activities.

http://www.howtoforge.com/intrusion_detection_with_ossec_hids