O'reilly's books are awesome... and this is no different. Anything and everything on how to use SNORT properly is listed here. Rules and syntax are easy to implement. One downside comment; the title mentions SNORT and IDS tools; it dealt with SNORT heavily, and I didn't get a good coverage of "other" IDS tools... maybe O'reilly has something else in the works?