macOS
Homebrewverified · 100%
brew install suricatalocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install suricataMacPorts ports tree · net/suricata/Portfile · source: api.github.com
brew
Install suricata with Homebrew, apk, apt, dnf, MacPorts, Nix, zypper
Network IDS, IPS, and security monitoring engine. Version 8.0.6 via Homebrew; verified 2026-07-08.
install
Additional install commands
Linux
Alpine Linux apkverified · 92%
sudo apk add suricataAlpine Linux edge package indexes · suricata · source: dl-cdn.alpinelinux.org
Debian aptverified · 92%
sudo apt install suricataDebian stable package indexes · suricata · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install suricataFedora Rawhide package metadata · suricata · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#suricatanixpkgs package indexes · pkgs/by-name/su/suricata/package.nix · source: api.github.com
openSUSE zypperverified · 92%
sudo zypper install libsuricata8_0_5openSUSE Tumbleweed package metadata · libsuricata8_0_5 · source: download.opensuse.org
overview
Package summary
Network IDS, IPS, and security monitoring engine
Project links
Commands and aliases
- suricata
- suricata-update
- suricatactl
- suricatasc
history
Project history and usage
Suricata is an open-source network IDS, IPS, and network security monitoring engine developed by the Open Information Security Foundation. In package-manager culture it is a serious operational tool: installed from distro repositories, PPAs, source tarballs, and service packages, then fed rules and packet traffic.
Project history
Suricata's official timeline traces the first code to Victor Julien and Matt Jonkman in 2007, with William Metcalf joining shortly afterward. The first public beta arrived on New Year's Eve 2009, followed by the founding of OISF and the Suricata 1.0 release on March 1, 2010.
The project grew around an open foundation model, training, conferences, and recurring stable release lines. Official documentation describes Suricata as a high-performance IDS, IPS, and network security monitoring engine owned by a community-run non-profit foundation and developed by OISF.
Adoption history
Suricata is packaged broadly across Unix-like systems. The input package facts list Homebrew, Debian, Ubuntu, Fedora, Alpine, Arch, MacPorts, Nix, and openSUSE names; official download pages also publish source releases, Windows installers, Ubuntu PPA channels, and RPM packages.
Community adoption is also visible in OISF's timeline: public training began in 2013, SuriCon began in 2015, and later SuriCon events drew international users, developers, vendors, and security teams.
How it is used
Suricata is typically configured through `suricata.yaml`, run as a packet inspection service or command-line tool, and paired with rule management through `suricata-update`. The quickstart walks users through choosing interfaces, editing `/etc/suricata/suricata.yaml`, installing rules, restarting the service, and reading EVE JSON output.
Why package nerds care
Suricata matters to package nerds because it sits at the intersection of kernel packet capture, distro service management, ruleset updates, YAML configuration, JSON logs, and fast C/Rust-ish systems engineering. Installing the package is only the start; the interesting work is wiring rules, interfaces, logs, capabilities, and updates into a reproducible host setup.
Timeline
- 2007: First Suricata code begins, according to the official timeline.
- 2009: First public beta release occurs on New Year's Eve.
- 2010: OISF is founded and Suricata 1.0 is released.
- 2013: First public in-person Suricata training takes place.
- 2015: First SuriCon is held.
- 2025: Suricata 8.0.0 is released.
- 2026: Official download page lists Suricata 8.0.5 and 7.0.16 as stable releases.
Related projects
- Suricata is commonly compared or deployed alongside IDS/IPS and network-monitoring ecosystems such as Snort-style rules, Emerging Threats/Open rulesets, Zeek-style monitoring, packet capture tooling, SIEM pipelines, and JSON log processors such as jq.
Sources
security posture
No protected-tool coverage found yet
No matching local secret-handling manifest was found for suricata. Nucleus package metadata is still published here so future coverage has a stable package URL.
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Installs with 7 runtime dependencies.
- Build metadata lists 2 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
suricata.yaml/etc/suricata/suricata.yaml/usr/local/etc/suricata/suricata.yaml
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
suricata | cli | global executable | |
suricata-update | cli | global executable | |
suricatactl | cli | global executable | |
suricatasc | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version8.0.6
manager updated2026-07-08
local dataok
upstreamnot checked
latest detectednot detected
- infoRelease/tag comparison is only available for GitHub repositories.https://suricata.ionone confidence
install metadata
Package metadata
| Package key | brew:suricata |
|---|---|
| Version | 8.0.6 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/suricata |
| Homepage | https://suricata.io |
| Repository | https://github.com/OISF/suricata |
| Upstream docs | https://docs.suricata.io/ |
| License | GPL-2.0-only |
| Source archive | https://www.openinfosecfoundation.org/download/suricata-8.0.6.tar.gz |
| Last updated | 2026-07-08T03:17:14Z |
| Pulse | updated |
| Dependencies | jansson, libmagic, libnet, libyaml, lz4, pcre2, python@3.14 |
| Build dependencies | pkgconf, rust |
| Uses from macOS | libpcap |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | suricata |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
suricata 1:7.0.10-1+deb13u4
Next Generation Intrusion Detection and Prevention Tool
sudo apt install suricata- Section: net
- Architecture: amd64
- 32 dependencies
- 4 optional deps
- normalized package name match
- Matched by: Suricata
Nix95%
suricata
nix profile install nixpkgs#suricata- normalized package name match
- Matched by: Suricata
Ubuntu apt95%
suricata 1:7.0.3-1build3
Next Generation Intrusion Detection and Prevention Tool
sudo apt install suricata- Section: universe/net
- Architecture: amd64
- 32 dependencies
- 4 optional deps
- normalized package name match
- Matched by: Suricata
apk95%
suricata 8.0.3-r0
High performance Network IDS, IPS and Network Security Monitoring engine
sudo apk add suricata- License: GPL-2.0-only
- Architecture: x86_64
- Source Package: suricata
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Suricata
apk95%
suricata-doc 8.0.3-r0
High performance Network IDS, IPS and Network Security Monitoring engine (documentation)
sudo apk add suricata-doc- License: GPL-2.0-only
- Architecture: x86_64
- Source Package: suricata
- normalized package name match
- Matched by: Suricata
apk95%
suricata-openrc 8.0.3-r0
High performance Network IDS, IPS and Network Security Monitoring engine (OpenRC init scripts)
sudo apk add suricata-openrc- License: GPL-2.0-only
- Architecture: x86_64
- Source Package: suricata
- normalized package name match
- Matched by: Suricata
dnf95%
suricata 8.0.5-1.fc45
Intrusion Detection System
sudo dnf install suricata- License: GPL-2.0-only
- Category: Unspecified
- Architecture: x86_64
- Source Package: suricata
- 30 dependencies
- 4 provides
- normalized package name match
- Matched by: Suricata
zypper95%
libsuricata8_0_5 8.0.5-1.1
Open Source Next Generation Intrusion Detection and Prevention Engine Library
https://www.openinfosecfoundation.org/
sudo zypper install libsuricata8_0_5- License: GPL-2.0-only
- Category: Unspecified
- Architecture: x86_64
- Source Package: suricata
- 4 dependencies
- 2 provides
- normalized package name match
- Matched by: Suricata
zypper95%
suricata 8.0.5-1.1
Open Source Next Generation Intrusion Detection and Prevention Engine
https://www.openinfosecfoundation.org/
sudo zypper install suricata- License: GPL-2.0-only
- Category: Unspecified
- Architecture: x86_64
- Source Package: suricata
- 31 dependencies
- 4 provides
- normalized package name match
- Matched by: Suricata
zypper95%
suricata-devel 8.0.5-1.1
Development files for the Suricata engine library
https://www.openinfosecfoundation.org/
sudo zypper install suricata-devel- License: GPL-2.0-only
- Category: Unspecified
- Architecture: x86_64
- Source Package: suricata
- 3 dependencies
- 1 provides
- normalized package name match
- Matched by: Suricata
MacPorts95%
suricata
sudo port install suricata- normalized package name match
- Matched by: Suricata
Debian apt92%
suricata-update 1.3.4-1
tool for updating Suricata rules
https://github.com/OISF/suricata-update
sudo apt install suricata-update- Section: net
- Architecture: amd64
- 3 dependencies
- installed executable or alias match
- Matched by: Suricata Update
Ubuntu apt92%
suricata-update 1.3.0-2
tool for updating Suricata rules
https://github.com/OISF/suricata-update
sudo apt install suricata-update- Section: universe/net
- Architecture: amd64
- 3 dependencies
- installed executable or alias match
- Matched by: Suricata Update
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment