Hello, take a look at snort. www.snort.org It's definitiv on (or better in) Suse Profeessional Edition. I don't know about SLES. I'am not shure if it a good idea to put snort on the same machine as the SAP System. It would be much better to place it inbetween, e.g. on your reverse Proxy (if you have one). Regards, Nico Manicone.