Hi all, Is anyone on here protecting a Nortel MCS complex with NIDS? I would be interested to see if you have written custom signatures for SIP and RTP traffic that would trigger an alert if anything other than 'normal' traffic is seen by the NIDS. Thanks in advance!