Suricata (software)
 |
|
| Developer(s) | Open Information Security Foundation |
|---|---|
| Stable release |
3.2.2 / June 7, 2017
|
| Preview release |
3.2RC1 / November 1, 2016
|
| Written in | C |
| Operating system | FreeBSD, Linux, UNIX, Mac OS X, Microsoft Windows |
| Type | |
| License | GNU General Public License[1] |
| Website | suricata-ids |
Suricata is an open source-based intrusion detection system (IDS) and intrusion prevention system (IPS). It was developed by the Open Information Security Foundation (OISF). A beta version was released in December 2009, with the first standard release following in July 2010.[2][3]
Contents
Features[edit]
- Multi-threading
- Automatic protocol detection
- Gzip decompression
- Independent HTP library
- Standard input methods
- Unified2 output
- Flow variables
- Fast IP matching
- HTTP log module
- Graphics card acceleration
- Windows binaries
- Lua scripting[5]
- Prelude output[6]
- file matching, logging, extraction, md5 checksum calculation[6]
- IP reputation
- DNS logger
- in a future release
- [4]
- Global flow variables
Third-party tools[edit]
Third-party tools available for Snort are compatible with Suricata, like the following:
- Snorby
- BASE
- Sguil (free)
- Aanval (commercial)
- Telesoft CERNE Open IDS Platform (commercial)
Free intrusion detection systems[edit]
See also[edit]
References[edit]
- ^ "Suricata license".
- ^ "New Open Source Intrusion Detector Suricata Released". Slashdot. 2009-12-31. Retrieved 2011-11-08.
- ^ "Suricata Downloads". Open Security Information Foundation. Retrieved 2011-11-08.
- ^ a b Jonkman, Matt (2009-12-31). "Suricata IDS Available for Download!". Seclists.org. Retrieved 2011-11-08.
- ^ "Suricata Features". Retrieved 2012-10-06.
- ^ a b "Suricata All Features". Retrieved 2012-10-06.
