+1 for BGP Flow Spec as well.It's only a matter of time before RPKI becomes a standard for most IP transit peerings. This is a feature we desperately need to keep using MikroTik routers to peer into the DFZ.
BGP FlowSpec is also important for DDoS mitigation.
I did parse through the library and yes there is an extensive list of IDS/IPS rulesets but not an extensive protocol detection support as nDPI. Maybe I'm missing something but I really don't see them.Browse the et repository via http. its very comprehensive.