<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mv="http://macVmlSchemaUri" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Arial;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
{font-family:MingLiU;
panose-1:2 2 5 9 0 0 0 0 0 0;}
@font-face
{font-family:"Malgun Gothic";
panose-1:2 11 5 3 2 0 0 2 0 4;}
@font-face
{font-family:Gulim;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri">I’ve forwarded your request to the Proofpoint sales team to respond.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-family:Arial;color:#1D0E00">Brad Woodberg
</span></b><span style="font-family:Arial;color:#1D0E00">l<b> </b>Group Product Manager, ETPro, Security Tools</span><span style="font-size:16.0pt"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:Arial">Proofpoint, Inc.</span><span style="font-family:"MS Mincho"">
<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:Arial">E:
<a href="mailto:bwoodberg@proofpoint.com"><span style="color:#0563C1">bwoodberg@proofpoint.com</span></a><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><a href="http://www.proofpoint.com/"><span style="font-family:Arial;color:blue;text-decoration:none"><img border="0" width="150" height="33" id="_x0000_i1026" src="cid:image001.png@01D2B827.189E2B60"></span></a><span style="font-size:16.0pt"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-family:Arial;color:#0F6B96">threat protection l compliance l archiving & governance l secure communication</span><span style="font-size:11.0pt;font-family:Calibri"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-family:Calibri;color:black">From: </span>
</b><span style="font-family:Calibri;color:black">Oisf-users <oisf-users-bounces@lists.openinfosecfoundation.org> on behalf of
</span><span style="font-family:"Malgun Gothic";color:black">박경호</span><span style="font-family:Calibri;color:black"> <pgh5247@naver.com></span><span style="font-family:MingLiU;color:black"><br>
</span><b><span style="font-family:Calibri;color:black">Reply-To: </span></b><span style="font-family:"Malgun Gothic";color:black">박경호</span><span style="font-family:Calibri;color:black"> <pgh5247@naver.com></span><span style="font-family:MingLiU;color:black"><br>
</span><b><span style="font-family:Calibri;color:black">Date: </span></b><span style="font-family:Calibri;color:black">Tuesday, April 18, 2017 at 5:13 AM<br>
<b>To: </b>"oisf-users@lists.openinfosecfoundation.org" <oisf-users@lists.openinfosecfoundation.org><br>
<b>Subject: </b>[Oisf-users] suricata rule & alert message<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<div>
<p><span style="font-size:10.0pt;font-family:"Gulim","serif"">Dear all,<o:p></o:p></span></p>
<p><span style="font-size:10.0pt;font-family:"Gulim","serif""> <o:p></o:p></span></p>
<p><span style="font-size:10.0pt;font-family:"Gulim","serif"">i have two questions.<o:p></o:p></span></p>
<p><span style="font-size:10.0pt;font-family:"Gulim","serif""> <o:p></o:p></span></p>
<p><span style="font-size:10.0pt;font-family:"Gulim","serif"">First, <o:p></o:p></span></p>
<p><span style="font-size:10.0pt;font-family:"Gulim","serif"">i want to use the ET pro rulesets for suricata instead of open rulesets.<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Gulim","serif";color:#222222">So, I have tried to contact with proofpoint company for several days.</span><span style="font-size:10.5pt;font-family:Arial;color:#222222"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Gulim","serif";color:#222222">But i couldn't receive any response from proofpoint. It was very very difficult for me....</span><span style="font-size:10.5pt;font-family:Arial;color:#222222"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Gulim","serif";color:#222222">If you know the email address for contact, please let me know the email.</span><span style="font-size:10.5pt;font-family:Arial;color:#222222"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Gulim","serif";color:#222222"></span><span style="font-size:10.5pt;font-family:Arial;color:#222222"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Gulim","serif";color:#222222">Second,</span><span style="font-size:10.5pt;font-family:Arial;color:#222222"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Gulim","serif";color:#222222">What's mean the timestamp in alert message?</span><span style="font-size:10.5pt;font-family:Arial;color:#222222"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Gulim","serif";color:#222222">is it the start time of the packet ? if or not, please explain to me.</span><span style="font-size:10.5pt;font-family:Arial;color:#222222"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Gulim","serif";color:#222222"></span><span style="font-size:10.5pt;font-family:Arial;color:#222222"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt;background:white"><span style="font-size:10.0pt;font-family:"Gulim","serif";color:#222222"></span><span style="font-size:10.5pt;font-family:Arial;color:#222222"><o:p></o:p></span></p>
</div>
</div>
<table class="MsoNormalTable" border="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><img border="0" width="1" height="1" id="_x0000_i1025" src="https://mail.naver.com/readReceipt/notify/?img=1ZbdKokcpXgmMxIShAnXKrp0a63SaAE9FAurpA%2BvKo34p6UZMqMXKxkgMX%2B0Moul74lR74lcWNFlbX30WLloWrdQareGbrMR%2BBF0bNFgWz0q%2BHK5WXI0W405p4eqp6F4WXk5pzJd16e574eZpm%3D%3D.gif"><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>