Download Suricata 3.0

Version 3.0 of Suricata has been released. Suricata is an open source network intrusion detection system (IDS), intrusion prevention system (IPS), and network security monitoring engine. It can be used to monitor network traffic and alert a system administrator if anything suspicious is detected. Development is overseen by the Open Information Security Foundation, with support from the community and various manufacturers. The with it on json Based logging system Eve collected data can be done with, among other things, log stash are used to display information graphically again at to give. Version 3.0 contains no major new changes, but several parts have been improved.

Features and Improvements

• Improved detection options, including multi-tenancy and xbits
• Performance and scalability much improved
• Much improved accuracy and robustness
• Lua scripting capabilities expanded significantly
• Many output improvements, including much more JSON
• NETMAP capture method support, especially interesting to FreeBSD users
• SMTP inspection and file extraction

For a full list of features added, please see this pagee.

Logstash Kibana fed with information from Suricata with json output.