I’ve mirrored an excellent talk by Bejtlich / Bianco on the topic of Network Security Monitoring and Sguil which was presented at ShmooCon earlier this year.