What tool do you use to detect network scanning?

As attackers will often do some network recon. Do you use any tools that alert you to active scanning happening on your network?