Talk about cooincidence, I was just researching psad when this article came up! - Detecting suspicious network traffic with psad