OSSEC is a powerful open source HIDS. If you are not using it on your servers, you should be.