Snort is an open source intrusion prevention system capable of real-time traffic analysis and packet logging.
Snort
$ alias snort='docker run --rm --net host -v `pwd`:/work -w /work vimagick/snort' $ snort -vde