// what it is
Description
Open Information Security Foundation's IDS/IPS. Speaks Snort rules, plus a richer Lua scripting layer, native JSON event output (Suricata-EVE), and built-in TLS/HTTP/DNS protocol parsing.
// use cases
What people use it for
- High-throughput network IDS
- Modern Snort-rule deployments
// commands
The commands you'll type
Process pcap
$ suricata -r capture.pcap -l /tmp/output