Projects / Suricata

Suricata

Suricata is an Intrusion Detection and Prevention (IDS/IPS) engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support, file extraction capabilities, and many more features. It's capable of loading existing Snort rules and signatures, and supports many frontends through Barnyard2.

Tags
Licenses
Operating Systems
Implementation

Recent releases

  •  21 May 2014 10:26

    Release Notes: This release adds TLS Heartbleed detection. It fixes the Unix socket runmode, fixes AF_PACKET IPS mode, and fixes various DNS handling issues. Many other issues were fixed.

    •  12 May 2014 14:19

      Release Notes: This release adds TLS Heartbleed detection and fixes the Unix socket runmode, AF_PACKET IPS mode, and various DNS handling issues. Many other issues were fixed.

      •  25 Mar 2014 10:52

        Release Notes: HTTP support was much improved. CUDA support was updated. A DNS parser and logger were added. Lua support was improved. The stream engine was made more robust. IPS mode was improved. VLAN support was improved. Options were added for enabling and disabling protocol parsers. Protocol detection was improved. IPv6 improvements were made. Profiling options were expanded. Unified JSON output was added. VLAN handling was improved. QinQ support was added. A command line option for overriding configuration settings was added. An optimized NSM runmode was added. An SSH logger was added.

        •  18 Mar 2014 14:39

          Release Notes: Packet capture issues at startup were fixed. Various JSON output issues were fixed. A crash case at rule reload was fixed. Default optimization level was restored. Fast-log output drop information was restored.

          •  06 Mar 2014 14:03

            Release Notes: JSON logging was improved. VLAN handling was improved. An SSH parser and logger was added. Many other issues were addressed.

            Screenshot

            Project Spotlight

            OpenStack4j

            A Fluent OpenStack client API for Java.

            Screenshot

            Project Spotlight

            TurnKey TWiki Appliance

            A TWiki appliance that is easy to use and lightweight.