Suricata 7.0.0-rc2 relesead!

Suricata 7.0.0 RC 2 is out and ready for testing.

We are pleased to announce the release of Suricata 7.0.0-rc2.
Since 7.0.0-rc1, we’ve kept working hard to ensure we’d release 7.0.0 this Summer. We invite everyone to help test this new release candidate and report your experiences and/or any red flags.

Get the release here:
7.0.0-rc2 –

Tickets for 7.0.0-rc2: 7.0.0-rc2 – Suricata – Open Information Security Foundation

Major changes and additions since RC 1:

  • New detection logic for “multi-buffer” keywords like dns.query
  • New lighter rule profiling mode by Eric Leblond
  • MPM split per app protocol
  • Many DPDK improvements: bonding interfaces, virtio, and many more things
  • SMTP fixes
  • HTTP/HTTP2 new keywords for header inspection
  • Improvements to IPS drop handling and exception policies
  • Stream engine fixes and improvements
  • Many stability fixes and improvements
  • Fixed WinDivert build
  • General code quality improvements
  • Suricata is now “scan-build” clean, with CI check added
  • Include libhtp 0.5.44
  • Rust: updated crate versions

RC1 release notes: Suricata 7.0.0-rc1 released

Some stats:

Special Thanks

Alex, Angelo Mirabella, Arne Welzel, Bazzan Don, Bill Meeks, Cole Dishington, Eloy Pérez González, Eric Leblond, Gabriel Lima Luz, Gianni Tedesco, Gleb Smirnoff, Haleema Khan, Ilya Bakhtin, jason taylor, Jeremy MountainJohnson, John Dewey, Josh Stroschein, Justin Azoff, Kirby Kuehl, Lancer Cheng, Long Doan, Luke Coughlan, Mats Klepsland, Maxim Korotkov, Michael Tremer, Modupe Falodun, Morris Chan, Odin Jenseg, Rafael Girão, Sascha Steinbis, Scott Jordan, Simon Dugas,
Steven Ottenhoff, Thomas Norheim, tianjinshan, Wes Hurd, William Correia, Oss-Fuzz, Coverity.

About Suricata

Suricata is a high-performance Network Threat Detection, IDS, IPS, and Network Security Monitoring engine – open source and owned by a community-run non-profit foundation, the Open Information Security Foundation (OISF). Suricata is developed by OISF, its supporting vendors, and the community.

Link to forum announcement: