Suricata (software)

From Wikipedia, the free encyclopedia
Suricata
Suricata IDS.png
Developer(s)Open Information Security Foundation
Stable release
6.0.4 / November 18, 2021; 3 months ago (2021-11-18)[1]
Repository
Written inC, Rust
Operating systemFreeBSD, Linux, UNIX, Mac OS X, Microsoft Windows
Type
  • Intrusion-detection system
  • Intrusion prevention system
LicenseGNU General Public License[2]
Websitesuricata-ids.org Edit this at Wikidata

Suricata is an open source-based intrusion detection system (IDS) and intrusion prevention system (IPS). It was developed by the Open Information Security Foundation (OISF). A beta version was released in December 2009, with the first standard release following in July 2010.[3][4]

Features[]

[5]

  • Multi-threading
  • Automatic protocol detection
  • Gzip decompression
  • Independent HTP library
  • Standard input methods
  • Unified2 output
  • Flow variables
  • Fast IP matching
  • HTTP log module
  • JSON standard outputs
  • Windows binaries
  • Lua scripting[6]
  • Prelude output[7]
  • file matching, logging, extraction, md5 checksum calculation[7]
  • IP reputation
  • DNS logger
  • VXLAN support since 4.1.5
in a future release
[5]
  • Global flow variables

Third-party tools[]

Third-party tools available for Snort are compatible with Suricata, like the following:

Free intrusion detection systems[]

See also[]

References[]

  1. ^ "Releases - OISF/suricata". Retrieved 18 November 2021 – via GitHub.
  2. ^ "Suricata license".
  3. ^ "New Open Source Intrusion Detector Suricata Released". Slashdot. 2009-12-31. Retrieved 2011-11-08.
  4. ^ "Suricata Downloads". Open Security Information Foundation. Retrieved 2011-11-08.
  5. ^ a b Jonkman, Matt (2009-12-31). "Suricata IDS Available for Download!". Seclists.org. Retrieved 2011-11-08.
  6. ^ "Suricata Features". Retrieved 2012-10-06.
  7. ^ a b "Suricata All Features". Retrieved 2012-10-06.

External links[]

Retrieved from ""