Suricata

Suricata is an open-source network threat detection engine that provides intrusion detection (IDS), intrusion prevention (IPS), network security monitoring (NSM), and deep packet inspection capabilities. It enables organizations to monitor network traffic in real time, detect malicious activities, inspect network protocols, and generate detailed alerts to help protect systems against cyber threats.

• Provides Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) capabilities.
• Performs high-speed, multi-threaded packet processing for improved performance.
• Supports deep packet inspection across numerous network protocols.
• Detects threats using community and custom rule sets.
• Offers comprehensive network security monitoring and traffic analysis.
• Generates detailed logs and alerts for security incident investigation.
• Supports file extraction, protocol identification, and TLS inspection.
• Integrates with SIEM and other security monitoring platforms.

Suricata Usage:

$ sudo su
$ apt update
$ suricata -V