Supriya Ghosh (Editor)

Suricata (software)

Updated on
Edit
Like
Comment
Share on FacebookTweet on TwitterShare on LinkedInShare on Reddit
Written in
  
C

Developer(s)
  
Open Information Security Foundation

Stable release
  
3.2 / December 1, 2016; 3 months ago (2016-12-01)

Preview release
  
3.2RC1 / November 1, 2016; 4 months ago (2016-11-01)

Operating system
  
FreeBSD, Linux, UNIX, Mac OS X, Microsoft Windows

Type
  
Intrusion-detection systemIntrusion prevention system

Suricata is an open source-based intrusion detection system (IDS). It was developed by the Open Information Security Foundation (OISF). A beta version was released in December 2009, with the first standard release following in July 2010.

Contents

  • Multi-threading
  • Automatic protocol detection
  • Gzip decompression
  • Independent HTP library
  • Standard input methods
  • Unified2 output
  • Flow variables
  • Fast IP matching
  • HTTP log module
  • Graphics card acceleration
  • Windows binaries
  • Lua scripting
  • Prelude output
  • file matching, logging, extraction, md5 checksum calculation
  • IP reputation
  • DNS logger
    • in a future release
  • Global flow variables

    • Third-party tools

    Third-party tools available for Snort are compatible with Suricata, like the following:

  • Snorby
  • BASE
  • Sguil (free)
  • Aanval (commercial)
  • Telesoft MPAC Security (commercial)

    • Free intrusion detection systems

  • Bro NIDS
  • OSSEC HIDS
  • Prelude Hybrid IDS
  • Sagan
  • Snort

    • References

    Suricata (software) Wikipedia
    (Text) CC BY-SA


    Similar Topics