http://www.atmarkit.co.jp/fsecurity/column/ueno/60.html

Sagan is a multi-threaded, real time system and event log monitoring system, but with a twist. Sagan uses a "Snort" like rule set for detecting bad things happening on your network and/or computer systems. If Sagan detects a "bad thing" ha…