[H-GEN] IDS - Samhain, OSSEC, other?

[Sarah Walters]

Good morning all,

I'm looking into host-based intrusion detection systems for work, and 
have been playing with Samhain so far. Someone mentioned OSSEC (.net) 
to me this morning as it was the only host-based IDS that made it into 
insecure.org's top 100 list of security tools (list available at 
http://sectools.org/tools3.html).

Can anyone give me any opinions on these two tools, or any others they
have tried please? I'm not interested in Tripwire as it is not free,
though a feature comparison would be welcome.

Thanks,
Sarah Walters