SNORT review
Using SNORT for Intrusion Detection
or
http://www.8wire.com/articles/?AID=2638