I have been testing various IDS tools and today I came across Tiger.
Tiger is a tool that can be use both as audit and intrusion detection systems. It supports multiple platforms and it is free and provided under the GNU GPL license.
Unlike other tools, Tiger depends only on POSIX tools and is written entirely in shell language.