Download Suricata 3.1.1

The first update for version 3.1 of Suricata has been released. Suricata is an open source network intrusion detection system (IDS), intrusion prevention system (IPS), and network security monitoring engine. It can be used to monitor network traffic and alert a system administrator if anything suspicious is detected. Development is overseen by the Open Information Security Foundation, with support from the community and various manufacturers. The with it on json Based logging system Eve collected data can be done with, among other things, log stash are used to display information graphically again at to give. The following improvements have been made in this release:

changes

• Feature #1775: Lua: SMTP Support
• Bug #1419: DNS transaction handling issues
• Bug #1515: Problem with Threshold.config when using more than one IP
• Bug #1664: Unreplied DNS queries not logged when flow is aged out
• Bug #1808: Can’t set thread priority after dropping privileges
• Bug #1821: Suricata 3.1 fails to start on CentOS6
• Bug #1839: suricata 3.1 configure.ac says >=libhtp-0.5.5, but >=libhtp-0.5.20 required
• Bug #1840: –list-keywords and –list-app-layer-protos not working
• Bug #1841: libhtp 0.5.21
• Bug #1844: netmap: IPS mode doesn’t set 2nd iface in promisc mode
• Bug #1845: Crash on disabling a app-layer protocol when it’s logger is still enabled
• Optimization #1846: af-packet: improve thread calculation logic
• Optimization #1847: rules: don’t warn on empty files

Logstash Kibana fed with information from Suricata with json output.