If you fiddle with MSSP, then you will most likely have heard of OSSIM. While the software itself appears quite powerful, it lacks in the MOST critical aspect of all: there is little if any documentation. Most of it is outdated and sources of information include a forum and a blog/tweeter feed. Come on OSSIM guys, you have the ball rolling, now you have to make it a nightmare for us to use the (otherwise quite good) product? To their defense, they have an open job posting about writing documentation but looks like there are no takers.