jasonish / simple-idsLinks
A very simple way to try Suricata and EveBox
☆15Updated 11 months ago
Alternatives and similar repositories for simple-ids
Users that are interested in simple-ids are comparing it to the libraries listed below
Sorting:
- An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers☆77Updated 6 months ago
- Kernel-based Process Monitoring on Linux Endpoints for File System, TCP and UDP Networking Events and optionally DNS, HTTP and SYSLOG App…☆71Updated 10 months ago
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆57Updated 2 months ago
- OpenWRT Suricata package☆55Updated 7 years ago
- ☆14Updated 6 months ago
- Accurate, modular, scalable PCAP manipulation tool written in Go.☆96Updated last year
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆481Updated 2 weeks ago
- This is a project to develop an ebpf program that uses ebpf tc to redirect ingress ipv4 udp/tcp flows toward specific dynamically created…☆32Updated last year
- Meer is a "spooler" for Suricata / Sagan.☆30Updated 2 years ago
- Tiny nDPI based deep packet inspection daemons / toolkit.☆89Updated 2 months ago
- OpenSPA - An open and extensible Single Packet Authorization (SPA) protocol☆102Updated 3 years ago
- An ebpf based firewall for openziti edge-routers/tunnelers☆24Updated last year
- Getting Started with eBPF☆27Updated 2 years ago
- Example programs fot the Journeying into XDP blogs☆51Updated 2 years ago
- The Wazuh agent for endpoints.☆94Updated 7 months ago
- BPFire development tree☆75Updated last month
- A horizontally scalable Direct Server Return layer 4 load balancer for Linux using XDP/eBPF☆118Updated 6 months ago
- The kernel tracer that attaches eBPF probes to containers for capturing TLS traffic☆30Updated this week
- The tool for updating your Suricata rules.☆289Updated 3 months ago
- Passive DNS Capture and Monitoring Toolkit☆350Updated last week
- (Unofficial) Wazuh integration to send alerts to IRIS.☆22Updated last year
- Velocity SJC 2019 - DDoS mitigation made easy with XDP and eBPF☆108Updated 6 years ago
- Argus Sensor☆74Updated last week
- Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…☆191Updated 4 months ago
- Testbed for testing NetFlow/IPFIX network monitoring probes. Includes tools for PCAP generation and replay of 1/10/100G network traffic.☆54Updated 3 weeks ago
- Suricata Verification Tests - Testing Suricata Output☆118Updated this week
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆452Updated last week
- SysFlow documentation and issues tracker☆46Updated last year
- Suricata Extreme Performance Tuning guide - Mark II☆121Updated 7 years ago
- File Access Policy Daemon☆231Updated this week