Suricata is an open source

Open source

The term open source describes practices in production and development that promote access to the end product's source materials. Some consider open source a philosophy, others consider it a pragmatic methodology...

-based intrusion detection system (IDS). It was developed by the Open Information Security Foundation (OISF). A beta version was released in December 2009, with the first standard release following in July 2010.

Features

in the current beta release:

• Multi-threading
  Thread (computer science)
  In computer science, a thread of execution is the smallest unit of processing that can be scheduled by an operating system. The implementation of threads and processes differs from one operating system to another, but in most cases, a thread is contained inside a process...
  
  
• Automatic protocol detection
• Gzip
  Gzip
  Gzip is any of several software applications used for file compression and decompression. The term usually refers to the GNU Project's implementation, "gzip" standing for GNU zip. It is based on the DEFLATE algorithm, which is a combination of Lempel-Ziv and Huffman coding...
  
   decompression
• Independent HTP library
• Standard input methods
• Unified2 output
• Flow variables
• Fast IP matching
• HTTP log module
• PostgreSQL
  PostgreSQL
  PostgreSQL, often simply Postgres, is an object-relational database management system available for many platforms including Linux, FreeBSD, Solaris, MS Windows and Mac OS X. It is released under the PostgreSQL License, which is an MIT-style license, and is thus free and open source software...
  
   log module

in a future release:

• Global flow variables
• Graphics card acceleration
• IP reputation
• Windows binaries

See also

Free Intrusion Detection Systems

• Bro NIDS
  Bro (software)
  Bro is an open source Unix based Network intrusion detection system . It is released under the BSD license.Bro was originally written by Vern Paxson.-External links:* *...
  
  
• OSSEC HIDS
  OSSEC
  OSSEC is a free, open source host-based intrusion detection system . It performs log analysis, integrity checking, Windows registry monitoring, rootkit detection, time-based alerting and active response. It provides intrusion detection for most operating systems, including Linux, OpenBSD, FreeBSD,...
  
  
• Prelude Hybrid IDS
  Prelude Hybrid IDS
  Prelude is an "agentless", universal, security information management system, released under the terms of the GNU General Public License....
  
  
• Snort
  Snort (software)
  Snort is a free and open source network intrusion prevention system and network intrusion detection system , created by Martin Roesch in 1998...
  
  

External links

• Open Information Security Foundation: Suricata
• Open Information Security Foundation