Intusion detection whats out there what is good

[netman4ttm]

I am currently running Portsentry on a Centos 4 server. I have had several weeks of scans on port 445; someone must think Microsoft is in there somewhere. I am considering Snort 2.1 in place of Portsentry on all servers.
The problem.... before I leap I would like to know if there is an IDS that is better than Portsentry or Snort. Portsentry was my choice years ago, simply because the author of "Securing and Optimizing Linux" used it and detailed the setup.

[netman4ttm]

I am adding this to explain why I am considering moving from Portsentry.
Portsentry actually opens a lot of ports; every port it binds to are now reported open to a scanner.
Portsentry won't bind to a port that is actually in use; so it doesn't protect port 80 if I am really running a web server.
What I am looking for is an IDS that monitors the ports I had to open, but with Portsentry's ability to drop the offending scan.

[kgun]

On a standalone Pc, I would personally prefer "Abtrusion Protector™ Personal Edition." It is free for home use.

http://www.abtrusion.com/

I do not know how good the "Abtrusion Protector™ Settings Server"

http://www.abtrusion.com/products.asp is.

The program is made in Sweden, http://www.abtrusion.com/founders.asp

[kgun]

Here is an article that compares PortSentry and Snort