Alternatives and similar repositories for suricata

Users that are interested in suricata are comparing it to the libraries listed below

• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆280Updated last month
• klingerko / nids-rule-library
  Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)
  ☆29Updated 2 years ago
• StamusNetworks / gophercap
  Accurate, modular, scalable PCAP manipulation tool written in Go.
  ☆94Updated last year
• quadrantsec / sagan
  Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…
  ☆188Updated 3 weeks ago
• utoni / nDPId
  Tiny nDPI based deep packet inspection daemons / toolkit.
  ☆87Updated this week
• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆174Updated last week
• OISF / suricata-verify
  Suricata Verification Tests - Testing Suricata Output
  ☆115Updated last week
• brimdata / brimcap
  Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)
  ☆91Updated 6 months ago
• StopDDoS / packet-captures
  packet captures of real-world ddos attacks
  ☆167Updated 2 weeks ago
• zeek / zeek-agent-v2
  Open source endpoint agent providing host information to Zeek. [v2]
  ☆86Updated this week
• alienfault / ossim
  Open Source Security Information and event Management
  ☆103Updated 10 years ago
• pevma / SEPTun-Mark-II
  Suricata Extreme Performance Tuning guide - Mark II
  ☆120Updated 7 years ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆502Updated last month
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆470Updated last week
• sudohyak / suricata-rules
  Suricata rules for the new critical vulnerabilities
  ☆83Updated 4 years ago
• DynamiteAI / dynamite-nsm
  DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…
  ☆171Updated 2 years ago
• robcowart / synesis_lite_snort
  Snort IDS/IPS log analytics using the Elastic Stack.
  ☆87Updated 4 years ago
• blacktop / docker-zeek
  Zeek IDS Dockerfile
  ☆101Updated 2 years ago
• arvindpj007 / Suricata-Detect-DoS-Attack
  Configuring the Suricata IDS to detect DoS attacks by adding custom rule file.
  ☆40Updated 5 years ago
• greenstatic / openspa
  OpenSPA - An open and extensible Single Packet Authorization (SPA) protocol
  ☆101Updated 2 years ago
• mosajjal / dnsmonster
  Passive DNS Capture and Monitoring Toolkit
  ☆343Updated this week
• DCSO / fever
  fast, extensible, versatile event router for Suricata's EVE-JSON format
  ☆56Updated last month
• Cyberg-ON / Timon-Rules
  Community-based CybergON-powered Suricata rules
  ☆12Updated 3 years ago
• satta / awesome-suricata
  A curated list of awesome things related to Suricata
  ☆202Updated 7 months ago
• digitalbond / Quickdraw-Snort
  Digital Bond's IDS/IPS rules for ICS and ICS protocols.
  ☆147Updated 5 years ago
• quadrantsec / meer
  Meer is a "spooler" for Suricata / Sagan.
  ☆30Updated 2 years ago
• Netgate / TNSR_IDS
  IDS using a port mirror, Snort and an alert -> RESTCONF utility
  ☆36Updated last year
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆248Updated last year
• sonertari / SSLproxy
  Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection
  ☆449Updated this week
• stanford-esrg / lzr
  LZR quickly detects and fingerprints unexpected services running on unexpected ports.
  ☆183Updated 6 months ago