[ILUG] Network cracking toolkit?

[wintermute]

I don't use port sentry on any servers or routers because.

Kiddie (x) could smurf one of my servers from a dialup account.
I could nuke that ip, and then some other user could get delegated that ip
from a dialup server and find themselves unable to connect to my machine(s).

Still the idea of nmaping someone who smurfs me is tempting.

I don't use snort, because, the one time I did install it on a router I
found that ICMP response times were almost tripled.
Which I accept was a result of 'bad' configuration, but this was the
'default' config, so I said "what's the point?", simply firewall off
services I don't want visible to the outside world and take on the task of
monitoring security on services I do offer.

http://www.linux.ie/articles/portsentryandsnortcompared.php
--Interesting article btw.... maybe I'll give snort another chance.