Don't forget the honeynet project.. http://www.honeynet.org/
Not the best site, but it does have some good info.