<div dir="ltr">Also agree. Third =)</div><div class="gmail_extra"><br><div class="gmail_quote">2014-11-03 21:41 GMT+01:00 Peter Manev <span dir="ltr"><<a href="mailto:petermanev@gmail.com" target="_blank">petermanev@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Mon, Nov 3, 2014 at 6:36 PM, Will Metcalf <<a href="mailto:william.metcalf@gmail.com">william.metcalf@gmail.com</a>> wrote:<br>
> Simon,<br>
><br>
> Respectfully, please do not use this list to promote the sale of your<br>
> products. You will not see me do this for Emerging Threats. I'm sure the<br>
> last thing people on this list want to see is content devolve into vendors<br>
> pushing products onto the community.<br>
><br>
<br>
</span>I second that<br>
<div class="HOEnZb"><div class="h5"><br>
> Regards,<br>
><br>
> Will<br>
><br>
> On Mon, Nov 3, 2014 at 11:04 AM, Simon Wesseldine<br>
> <<a href="mailto:simon.wesseldine@idappcom.com">simon.wesseldine@idappcom.com</a>> wrote:<br>
>><br>
>> Hi Raj,<br>
>><br>
>><br>
>><br>
>> If you haven't had a look already, please see the rules by idappcom<br>
>> (<a href="http://www.ipssecurityrules.co.uk" target="_blank">www.ipssecurityrules.co.uk</a>).<br>
>><br>
>> They have a library of vulnerability based rules that are Suricata<br>
>> compatible. What's more, for every rule they have a packet capture to test<br>
>> it with, using the software application 'Traffic IQ Professional'<br>
>> (<a href="http://www.idappcom.com" target="_blank">www.idappcom.com</a>).<br>
>><br>
>><br>
>><br>
>> A great way to manage your rules from multiple vendors is using the 'Easy<br>
>> Rules Manager (ERM)', again by idappcom.<br>
>><br>
>><br>
>><br>
>> My advice, if you want complete coverage, then use VRT, ET and IPS-SR<br>
>> rules together.<br>
>><br>
>><br>
>><br>
>> Best regards,<br>
>><br>
>> Simon.<br>
>><br>
>><br>
>> _______________________________________________<br>
>> Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org">oisf-users@openinfosecfoundation.org</a><br>
>> Site: <a href="http://suricata-ids.org" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" target="_blank">http://suricata-ids.org/support/</a><br>
>> List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
>> Training now available: <a href="http://suricata-ids.org/training/" target="_blank">http://suricata-ids.org/training/</a><br>
><br>
><br>
><br>
> _______________________________________________<br>
> Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org">oisf-users@openinfosecfoundation.org</a><br>
> Site: <a href="http://suricata-ids.org" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" target="_blank">http://suricata-ids.org/support/</a><br>
> List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
> Training now available: <a href="http://suricata-ids.org/training/" target="_blank">http://suricata-ids.org/training/</a><br>
<br>
<br>
<br>
</div></div><span class="HOEnZb"><font color="#888888">--<br>
Regards,<br>
Peter Manev<br>
</font></span><div class="HOEnZb"><div class="h5">_______________________________________________<br>
Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org">oisf-users@openinfosecfoundation.org</a><br>
Site: <a href="http://suricata-ids.org" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" target="_blank">http://suricata-ids.org/support/</a><br>
List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
Training now available: <a href="http://suricata-ids.org/training/" target="_blank">http://suricata-ids.org/training/</a><br>
</div></div></blockquote></div><br></div>