Distributions Containing Suricata¶
Security oriented distributions¶
SELKS¶
"SELKS is both Live and installable ISO based on Debian implementing a ready to use Suricata IDS/IPS. The name comes from its major components: Suricata Elasticsearch Logstash Kibana Scirius. After starting or installing SELKS, you get a running Suricata with IDPS and NSM capabilities, Kibana to analyse alert and events and Scirius to configure the Suricata ruleset. SELKS is released under GPLv3 license. Sources, issues tracker and wiki are hosted on GitHub."
Suricata 2.1beta4 is part of SELKS 2.0
https://www.stamus-networks.com/open-source/#selks
Security Onion¶
"Security Onion is a Linux distro for IDS (Intrusion Detection System) and NSM (Network Security Monitoring). It's based on Xubuntu 12.04 and contains Snort, Suricata, Sguil, Squert, Xplico, tcpreplay, scapy, hping, and many other security tools."
Suricata 7.0.6 is part of the Security Onion 2.4
http://securityonion.blogspot.com/
SimpleWall¶
Simplewall is a software appliance SMB firewall. It delivers simplest and most user friendly UTM for small & medium sized businesses globally to protect their business networks, maximize bandwidth usage and define personalize content filtering policies for employee productivity. Most importantly, Simplewall is easy to setup and manage for the system administrator as well as to the business owner.
Suricata 2.0.6 is part of simplewall current release.
http://www.simplewallsoftware.com/
OSSIM¶
OSSIM is a software appliance that contains a Host Intrusion Detection System (HIDS), a Network Intrusion Detection System (NIDS), and Security Information and Event Management (SIEM).
Regular distributions¶
Ubuntu¶
Ubuntu 22.04 contains Suricata 6.0.4
Ubuntu 23.10 contains Suricata 7.0.0
Ubuntu 24.04 contains Suricata 7.0.3
Ubuntu 24.10 contains Suricata 7.0.6
An official PPA with 7.0.7 is available here https://launchpad.net/~oisf/+archive/suricata-stable
Overview of Suricata packages in Ubuntu:
http://packages.ubuntu.com/search?keywords=suricata&searchon=names&suite=all§ion=all
Debian¶
Bookworm contains Suricata 6.0.10
Bookworm-backports contains Suricata 7.0.6
Testing contains Suricata 7.0.6
Sid contains Suricata 7.0.6
Backports instructions: http://blog.inliniac.net/2015/01/08/suricata-has-been-added-to-debian-backports/
Link for seeing what version Debian has:
https://tracker.debian.org/pkg/suricata
Fedora¶
Fedora 40 contains Suricata 7.0.6
Fedora 41 contains Suricata 7.0.6
Links for seeing what version Fedora has:
https://packages.fedoraproject.org/pkgs/suricata/suricata/
FreeBSD¶
Ports contains 7.0.6
http://www.freshports.org/security/suricata
ArchLinux¶
AUR contains 7.0.5
https://aur.archlinux.org/packages/suricata/
Gentoo¶
portage contains 7.0.5
https://packages.gentoo.org/packages/net-analyzer/suricata
Alpine Linux¶
Alpine Linux 3.20 community repo contains 7.0.7
https://pkgs.alpinelinux.org/packages?name=suricata
Others¶
Any distro missing? Outdated info? Please let us know!