GFI LANguard S.E.L.M – Intrusion detection through event log monitoring.
GFI LANguard Security Event Log Monitor is a network wide event log monitor that retrieves logs from all NT/2000 servers and workstations and immediately alerts the administrator of possible intrusions for immediate host based intrusion detection. Using the LANguard event viewer you can also create network wide reports and identify machines being targeted as well as local users trying to hack internal company information.
Because LANguard analyses the system event logs, rather than sniffing network traffic like traditional IDS products do, LANguard S.E.L.M. is not impaired by switches, IP traffic encryption or high speed data transfer.