Modern open source NIDS/HIDS and consoles? [closed]

I think the best open source combinations are:

For NIDS: Snort with BASE for the web ui

For HIDS: OSSEC

I also use OSSEC to consolidade the NIDS data into a single place (like a SIEM OSSEC does log analysis, file integrity checking and rootkit detection).

Links: http://www.snort.org http://www.ossec.net http://base.secureideas.net/

OSSIM.

OSSIM consolidates all that kind of stuff. OSSEC, Snort, etc.

Open source & Free.

OSSIM has the following software components:

Arpwatch – used for MAC anomaly detection.
P0f – used for passive OS detection and OS change analysis.
Pads – used for service anomaly detection.
Nessus – used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
Snort – the IDS, also used for cross correlation with nessus.
Spade – the statistical packet anomaly detection engine. Used to gain knowledge about attacks without signatures.
Tcptrack – used for session data information which can prove useful for attack correlation.
Ntop – which builds an impressive network information database from which we can identify aberrant behavior/anomaly detection.
Nagios – fed from the host asset database, it monitors host and service availability information.
Osiris – a great HIDS.
OCS-NG – cross-platform inventory solution.
OSSEC – integrity, rootkit, registry detection, and more.

http://www.alienvault.com/community.php?section=Home

-Josh