jasonish / simple-idsLinks
A very simple way to try Suricata and EveBox
☆15Updated 10 months ago
Alternatives and similar repositories for simple-ids
Users that are interested in simple-ids are comparing it to the libraries listed below
Sorting:
- ☆14Updated 4 months ago
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆476Updated 2 weeks ago
- This is a project to develop an ebpf program that uses ebpf tc to redirect ingress ipv4 udp/tcp flows toward specific dynamically created…☆32Updated last year
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆57Updated last month
- Accurate, modular, scalable PCAP manipulation tool written in Go.☆95Updated last year
- An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers☆73Updated 4 months ago
- OpenWRT Suricata package☆54Updated 7 years ago
- Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…☆190Updated 2 months ago
- The tool for updating your Suricata rules.☆285Updated last month
- An ebpf based firewall for openziti edge-routers/tunnelers☆24Updated last year
- Kernel-based Process Monitoring on Linux Endpoints for File System, TCP and UDP Networking Events and optionally DNS, HTTP and SYSLOG App…☆71Updated 8 months ago
- eBPF agent to trace processes back to SSH Client IP☆19Updated 2 years ago
- Suricata Verification Tests - Testing Suricata Output☆117Updated last week
- Open source endpoint agent providing host information to Zeek. [v2]☆90Updated 3 weeks ago
- Example programs fot the Journeying into XDP blogs☆50Updated 2 years ago
- XDP FW: eXpress Data Path FireWall module☆27Updated 2 years ago
- Passive DNS Capture and Monitoring Toolkit☆347Updated this week
- A curated list of awesome things related to Suricata☆213Updated last month
- Tiny nDPI based deep packet inspection daemons / toolkit.☆89Updated last week
- An example of iptables-bpf with Go+eBPF☆17Updated 4 years ago
- Suricata Extreme Performance Tuning guide - Mark II☆121Updated 7 years ago
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆448Updated this week
- Getting Started with eBPF☆25Updated 2 years ago
- gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that…☆191Updated 5 months ago
- An open standard for hashing network flows into identifiers, a.k.a "Community IDs".☆190Updated last year
- ☆10Updated 5 years ago
- Meer is a "spooler" for Suricata / Sagan.☆30Updated 2 years ago
- The kernel tracer that attaches eBPF probes to containers for capturing TLS traffic☆29Updated 3 weeks ago
- Velocity SJC 2019 - DDoS mitigation made easy with XDP and eBPF☆108Updated 6 years ago
- ☆15Updated 10 months ago