I think that also can be done with snort.