Maybe portsentry would be a good choice for ids on a linux server.