Easily one of the to-the-point, no nonsense, network reconnaissance detection methods I have read appeared yesterday via the CYMRU Blog; obviously written with both great care and expertise, David Monnier's piece on Detecting Cyber Recon Using Network Signals is today's Must Read. Enjoy.