well that will probably ruin a decent product. I use and recommend snort but cisco will find a way to make it too expensive.
this does explain why cisco dropped their product a couple years ago.
What does Snort do?