Snort

The original open-source network intrusion detection and prevention engine (now Cisco), using signature rules to detect known attacks in traffic.