Find three IDS$/$IPS and compare them in terms of

$.$ What are they focusing on$?$

$.$ What are they monitoring and how?

$.$ Are they signature based or anomaly based?

$.$ Give an example of their rule $($one rule for each IDS$/$IPS$)$ and explain what it does.