Alternatives and similar repositories for suricata:

Users that are interested in suricata are comparing it to the libraries listed below

• vipinpv85 / DPDK-Suricata_3.0
  add dpdk interface and packet processing to suricata in worker mode
  ☆64Updated 4 years ago
• vipinpv85 / DPDK_SURICATA-4_1_1
  dpdk infrastructure for software acceleration. Currently working on RX and ACL pre-filter
  ☆90Updated 3 years ago
• NachtZ / daq_dpdk
  ☆22Updated 8 years ago
• al0ne / suricata_optimize
  Suricata安装部署&丢包优化&性能调优&规则调整&Pfring设置
  ☆140Updated 5 years ago
• EggUncle / SnortSourceCodeAnalyze
  snort3.0 源码分析
  ☆34Updated 5 years ago
• zhyq / Libnids
  The Libnids parallelized on commercial multi-core systems
  ☆27Updated 7 years ago
• ggrandes-clones / pmon
  Copy: Linux process monitoring (exec, fork, exit, set*uid, set*gid)
  ☆31Updated 2 years ago
• dodng / BeLibnids
  It is a platform to use multiprocess to combine dpdk and libnids together to support analyse packets in 10G port.
  ☆38Updated 10 years ago
• wolfpython / nids
  基于网络的入侵检测系统
  ☆61Updated 13 years ago
• qssec / TSL-1.0-protocol-bypass-resolution
  TLS 技术原理与 1.0协议旁路解密实现方法
  ☆26Updated 6 years ago
• kunpengcompute / hyperscan
  A high-performance regular expression matching library
  ☆92Updated 3 months ago
• LubinLew / lua-resty-hyperscan
  hyperscan for openresty
  ☆12Updated 2 years ago
• xisafe / suricata-rule
  suricata IDS的规则，测试在用的，部分自写的规则视情况放出。
  ☆18Updated 5 years ago
• grayddq / HIDS
  HIDS全称是Host-based Intrusion Detection System，即基于主机型入侵检测系统，HIDS运行依赖这样一个原理：一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成：一部分…
  ☆104Updated 7 years ago
• ttl255 / network_protocol_pcap
  IDS协议识别测试流量
  ☆22Updated 6 years ago
• xianlimei / yiwei.github.io
  2017年底将至，正恰逢笔者的小棉袄出身，也是对人生这段时间的总结，决定写点东西留作纪念。 如有任何问题，可以联系我(liaixian1130@gmail.com，小棉袄小名:艾娴^_^)。欢迎技术交流，喷子勿扰了。文章中理论会提一部分，基本都是言简意赅，只说重点，完全以实…
  ☆42Updated 7 years ago
• pangyemeng / dpdk-sniffer
  主要利用DPDK做DPI功能，此项目仅仅作为个人学习DPDK的实践项目。
  ☆23Updated 7 years ago
• hi-KK / ICS-Protocol-identify
  Using nmap NSE scripts for identifying common ICS protocols[使用nmap的nse脚本对常见工控协议进行识别，附对应nse脚本，并记录pcap流量]
  ☆150Updated 4 years ago
• peter-cui1221 / sqlinjection-detect
  SQL injection detection engine built on of SQL tokenizing and syntax analysis written in C
  ☆59Updated 4 years ago
• iqiyi / qnsm
  QNSM is network security monitoring framework based on DPDK.
  ☆524Updated 3 years ago
• MITRECND / libnids
  libnids
  ☆109Updated last year
• zhanghaoyil / seesaw
  Automatic reversed shell detecting and defensing
  ☆51Updated 6 years ago
• phunterlau / dga_classifier
  Sample DGA classifier
  ☆124Updated 9 years ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 5 years ago
• BoneLee / dns_tunnel_dectect_with_CNN
  dns tunnel dectect with CNN
  ☆62Updated 5 years ago
• tanjiti / packet_analysis
  IP/TCP/UDP数据包分析及解析
  ☆223Updated 7 years ago
• NewBee119 / StreamDump
  tcp stream dump with BPF filter rules | bidirection | domain
  ☆48Updated 5 years ago
• mannirulz / BotDAD
  Anomaly detection based on DNS traffic analysis
  ☆51Updated 4 years ago
• euphrat1ca / ICSwiki
  ICSwiki
  ☆26Updated 4 years ago
• napatech / daq_dpdk_multiqueue
  Snort DPDK DAQ module with multiqueue support - Primarily for Napatech NICs
  ☆29Updated 6 years ago