The Bro Network Security Monitor

http://blog.opensecurityresearch.com/2014/03/identifying-malware-traffic-with-bro.html