Suricata Alternatives
Suricata is described as 'high performance Network IDS, IPS and Network Security Monitoring engine. Open Source and owned by a community run non-profit foundation, the Open Information Security Foundation (OISF). Suricata is developed by the OISF and its supporting vendors' and is a Network Monitor in the network & admin category. There are six alternatives to Suricata for Linux, Mac, Windows, Self-Hosted solutions and BSD. The best alternative is snort, which is both free and Open Source. Other great apps like Suricata are Arkime, Maltrail, Redborder and LOKI Free IOC Scanner.
Suricata alternatives are mainly Network Monitors but may also be Anti-Malware Apps or Network Analyzers. Filter by these if you want a narrower list of alternatives or looking for a specific functionality of Suricata.
Snort® is an open source network intrusion prevention and detection system (IDS/IPS) developed by Sourcefire. Combining the benefits of signature, protocol, and anomaly-based inspection, Snort is the most widely deployed IDS/IPS technology worldwide.
snort vs Suricata opinions
false poitive by antivirus
It is a real IPDS + IDS traffic analyzer
Moloch augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An intuitive and simple web interface is provided for PCAP browsing, searching, and exporting.
Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user defined lists, where trail can be anything from domain...
redborder is an Open Source, Big Data cybersecurity and traffic analysis platform accompanied by a set of active probes managed in an integrated manner. Can be deployed on-premise or used as a cloud service. Managing SNORT events.
Loki looks to be somewhat like Detekt, a free downloadable aimed at detecting evidence of state hacking, but more aimed at the corporate crowd, rather than activists.
⚫︎ Portable
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
No screenshots yet