A previous design tip showed some IDS slides. The following is an associated lecture on it [Zoom]:
Some associated demos are:
DEMO:Running Snort from the command line [Link] DEMO:Running WinPCap to show interfaces [Link] [Tut 1.8.1][Src code] DEMO:Running WinPCap to show packet capture [Link] [Tut 2.9.1][Src code] DEMO:Running WinPCap to show packet details [Link] [Tut 3.13.1][Src code]