Download Suricata 2.0.4

Version 2.0.4 of Suricata has been released. Suricata is an open source network intrusion detection system (IDS), intrusion prevention system (IPS), and network security monitoring engine. It can be used to monitor network traffic and alert a system administrator if anything suspicious is detected. Development is overseen by the Open Information Security Foundation, with support from the community and various manufacturers. The main change in version 2.0 is Eve, a fully op json based logging system. Eve can, among other things, with log stash are used to display information graphically again at to give. The changelog for this release looks like this:

Suricata 2.0.4 Available!

This update fixes a bug in the SSH parser, where a malformed banner could lead to evasion of SSH rules and missing log entries. In some cases it may also lead to a crash. Bug discovered and reported by Steffen Bauch.

Additionally, this release also addresses a new IPv6 issue that can lead to evasion. Bug discovered by Rafael Schaefer working with ERNW GmbH.

changes

• Bug #1276: ipv6 defrag issue with routing headers
• Bug #1278: ssh banner parser issue
• Bug #1254: sig parsing crash on malformed rev keyword
• Bug #1267: issue with ipv6 logging
• Bug #1273: Lua – http.request_line not working
• Bug #1284: AF_PACKET IPS mode not logging drops and stream inline issue

Logstash Kibana fed with information from Suricata with json output.