The Suricata Engine是一个开源的下一代入侵检测与防护引擎。旧版本的一些介绍参见这里:http://www.pulog.org/tools/542/ids-Suricata/。Suricata Engine和the HTP Library在GPLv2许可下使用。The HTP Library是一个HTTP的标准化和解析工具,它能够为Suricata Engine提供先进的HTTP流处理功能。目前,Suricata 更新至1.1rc1版,新版主要改变如下:
New features:
    * extended HTTP request logging for use with (among other things) http_agent for Sguil (#38)
    * AF_PACKET report drop stats on shutdown (#325)
    * new counters in stats.log for flow and stream engines (#348)

Improvements:
    * SMTP parsing code support for BDAT command (#347)
    * HTTP URI normalization no longer converts to lowercase (#362)
    * AF_PACKET works with privileges dropping now (#361)
    * Prelude output for state matches (#264, #355)

Under the hood:
    * update of the pattern matching code that should improve accuracy
    * rule parser was made more strict (#295, #312)

Notable Fixes & Changes:
    * multiple event suppressions for the same SID was fixed (#366)
    * several accuracy fixes
    * removal of the unified1 output plugins (#353)
工具下载:http://www.openinfosecfoundation.org/download/suricata-1.1rc1.tar.gz