5n0r7 is a snort alert file parser. It sorts the alerts based on source IP, destination IP, and frequency. 5n0r7 allows one to detect attacks (portscans, probes, or whatever snort is configured to alert) right away when displaying the sorted alert file.
8240c85f178c2a1cfd3e3c461cbfd3b6abb913e599def9d6fb3fbea47c507074