182 Open source projects that are alternatives of or similar to Suricata Update

A Suricata Docker image.

An extremely crude, lightweight Web Frontend for Suricata/Bro to be used with BriarIDS

Bro IDS Dockerfile

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)

Suricata git repository maintained by the OISF

Zeek IDS Dockerfile

A website and framework for testing NIDS detection

Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等

A Suricata based IDS/IPS distro

gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

Real-time HTTP Intrusion Detection

bandwidth monitor and rate estimator

Daemon to ban hosts that cause multiple authentication errors

Super short, fully unique, non-sequential and URL friendly Ids

Networking activity logger for Swift

Suitably random and reasonably unique human readable (and fairly adorable) ids

NFStream: a Flexible Network Data Analysis Framework.

A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.

AppSpector is a debugging service for mobile apps

Malicious traffic detection system

Windows Firewall Notifier extends the default Windows embedded firewall by allowing to handle and notify about outgoing connections, offers real time connections monitoring, connections map, bandwidth usage monitoring and more...

A Chrome extension which shows background network activity of web pages after they are loaded.

an android library for debugging what we care about directly in app.

Application: Collect ALL UniFi Controller, Site, Device & Client Data - Export to InfluxDB or Prometheus

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Open-Source Security Architecture | 开源安全架构

Fastest UUID with cryptographic PRNG for JS

Real-time monitoring of IT components and services, such as networks, servers, VMs, applications and the cloud.

iOS Debugging Tool 🚀

Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets

Gadgets for Rainmeter

High performance ping tool

🔎 An HTTP inspector for Android & OkHTTP (like Charles but on device)

Arkime (formerly Moloch) is an open source, large scale, full packet capturing, indexing, and database system.

Yet Another Sniffer for monitoring network traffic

Scirius is a web application for Suricata ruleset management.

A lightweight tool to score network traffic and flag anomalies

🤖 Id obfuscation based on Knuth's multiplicative hashing method for PHP.

arpspoof for macOS - intercept packets on a switched LAN

Generic Signature Format for SIEM Systems

MRTG - Multi Router Traffic Grapher

A curated list of amazingly awesome Cybersecurity datasets

Console based MAP 🗺 : with lots of features 🤩

An always-on framework that performs end-to-end functional network testing for reachability, latency, and packet loss

a iOS network debug library, monitor HTTP requests

Operation Wocao - Indicators of Compromise

Pulled Pork for Snort and Suricata rule management (from Google code)

Network Source of Truth is an open source IPAM and network inventory database

QNSM is network security monitoring framework based on DPDK.

64 bit ID Generator

The default package source of the Zeek Package Manager

This plugin provides native network instrumentation for monitoring and metrics collection, including: hardware, TCP response, RBLs, whois, port status, and more.

👻 A LAN dropbox chatbot controllable via Telegram

Graphpath generates an ASCII network diagram from the route table of a Unix/Linux

A cross platform http sniffer with a web UI

Pandora FMS is a flexible and highly scalable monitoring system ready for big environments. It uses agents (Linux, Windows, AIX, HP-UX, Solaris and BSD systems) and can do both local and remote network monitoring (SNMP v3, TCP checks, WMI, etc).

1) Real-time visualization of network traffic (Ethernet and Internet), and 2) Streaming of header data from your network interfaces via WebSockets

DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat detection

Wazuh - Chef cookbooks