Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

cybersecurityidsintrusion-detection-systemintrusion-prevention-systemipsnetwork-monitornetwork-monitoringnsmsecuritysuricatathreat-hunting

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Leblond 27f1d88374 Add pcap-info alert format. ... This patch adds a new alert format called pcap-info. It aims at providing an easy to parse one-line per-alert format containing the packet id in the parsed pcap for each alert. This permit to add information inside the pcap parser. This format is made to be used with suriwire which is a plugin for wireshark. Its target is to enable the display of suricata results inside wireshark. This format doesn't use append mode per default because a clean file is needed to operate with wireshark. The format is a list of values separated by ':': Packet number:GID of matching signature:SID of signature:REV of signature:Flow:To Server:To Client:0:0:Message of signature The two zero are not yet used values. Candidate for usage is the part of the packet that matched the signature.		15 years ago
benches	Initial add of the files.	17 years ago
doc	Support for PF_RING versions where packet passed as a reference and version 4.7.1 where pfring_enable_ring now seems to be required.	15 years ago
libhtp	libhtp/m4 dir won't be created on CentOS 5.3 by autogen.sh, so work around that by having it in git	15 years ago
m4	Prelude plugin: add detection in configure script	17 years ago
qa	Profiling: add accounting for several detection phases.	15 years ago
rules	Add signature file for stream events.	15 years ago
src	Add pcap-info alert format.	15 years ago
.gitignore	Import .gitignore file.	16 years ago
COPYING	Initial add of the files.	17 years ago
ChangeLog	Initial add of the files.	17 years ago
LICENSE	import of gplv2 LICENSE	17 years ago
Makefile.am	Add decoder-events to Makefile.am as well.	16 years ago
Makefile.cvs	Initial add of the files.	17 years ago
acsite.m4	Added C99 defs/macros to acsite.m4 for CentOS	17 years ago
autogen.sh	Add initial support for reading packets from a DAG card, we only support reading from a single stream at this time.	16 years ago
classification.config	Import of classification.config	17 years ago
configure.in	You spin me right round baby, right round like a rotating packet capture right round. Oh, also log file size counters are now uint64_t	15 years ago
depcomp	Update autojunk.sh + build update.	17 years ago
doxygen.cfg	Doxygen: Include documentation of define dependant code.	15 years ago
install-sh	Update autojunk.sh + build update.	17 years ago
missing	Update autojunk.sh + build update.	17 years ago
mkinstalldirs	Update autojunk.sh + build update.	17 years ago
reference.config	Add the ET reference.config file as a default	16 years ago
suricata.yaml	Add pcap-info alert format.	15 years ago