Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

cybersecurityidsintrusion-detection-systemintrusion-prevention-systemipsnetwork-monitornetwork-monitoringnsmsecuritysuricatathreat-hunting

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Leblond 27f1d88374 Add pcap-info alert format. ... This patch adds a new alert format called pcap-info. It aims at providing an easy to parse one-line per-alert format containing the packet id in the parsed pcap for each alert. This permit to add information inside the pcap parser. This format is made to be used with suriwire which is a plugin for wireshark. Its target is to enable the display of suricata results inside wireshark. This format doesn't use append mode per default because a clean file is needed to operate with wireshark. The format is a list of values separated by ':': Packet number:GID of matching signature:SID of signature:REV of signature:Flow:To Server:To Client:0:0:Message of signature The two zero are not yet used values. Candidate for usage is the part of the packet that matched the signature.		14 years ago
benches	…
doc	Support for PF_RING versions where packet passed as a reference and version 4.7.1 where pfring_enable_ring now seems to be required.	15 years ago
libhtp	libhtp/m4 dir won't be created on CentOS 5.3 by autogen.sh, so work around that by having it in git	15 years ago
m4	…
qa	Profiling: add accounting for several detection phases.	14 years ago
rules	Add signature file for stream events.	14 years ago
src	Add pcap-info alert format.	14 years ago
.gitignore	Import .gitignore file.	15 years ago
COPYING	…
ChangeLog	…
LICENSE	…
Makefile.am	Add decoder-events to Makefile.am as well.	15 years ago
Makefile.cvs	…
acsite.m4	…
autogen.sh	Add initial support for reading packets from a DAG card, we only support reading from a single stream at this time.	16 years ago
classification.config	Import of classification.config	16 years ago
configure.in	You spin me right round baby, right round like a rotating packet capture right round. Oh, also log file size counters are now uint64_t	14 years ago
depcomp	Update autojunk.sh + build update.	16 years ago
doxygen.cfg	Doxygen: Include documentation of define dependant code.	14 years ago
install-sh	Update autojunk.sh + build update.	16 years ago
missing	Update autojunk.sh + build update.	16 years ago
mkinstalldirs	Update autojunk.sh + build update.	16 years ago
reference.config	Add the ET reference.config file as a default	15 years ago
suricata.yaml	Add pcap-info alert format.	14 years ago