Check out Snort_inline on the honeynet project website. www.honeynet.org