snort rules http://www.emergingthreats.net/ next generation ids/ips http://www.openinfosecfoundation.org/