New in Suricata 9 and later Precision hunting with subslice Most Suricata rules express the presence of content in a buffer, and the existing offset and depth modifiers already pin […]
Suricata keyword update: viewing entropy values
Introduction In my blog introducing the Entropy keyword, I mentioned that we were working on a way to include the calculated entropy value in the output to assist in tuning […]
Suricata keyword highlight: entropy
New in Suricata 8 and later Motivation or Why does Suricata need another keyword? Back to Suricon Madrid in 2024. Chris Wakelin’s presentation discussed the power of using Lua – […]
Suricata Engine’s 20x performance upgrade on rule grouping
Table of Contents Note: The professional diagrams in this blog were made by a professional artist on a professional tool. The Issue with Engine start time Have you ever tried […]