suricata Archives - ITFROMZERO - Share tobe shared!

How to Install and Configure Suricata IDS/IPS on CentOS Stream 9: Real-Time Network Attack Detection and Prevention

By IT From Zero November 5, 2026

A guide to installing Suricata IDS/IPS on CentOS Stream 9 for network intrusion detection and monitoring. Covers suricata.yaml configuration, disabling packet offload via ethtool/NetworkManager, and parsing eve.json logs with jq.

Network

Installing and Optimizing Suricata on Linux: A Battle-Tested Guide to Deploying IDS/IPS

By IT From Zero October 31, 2026

A battle-tested comparison of Snort, Zeek, and Suricata under heavy traffic. Step-by-step guide to deploying Suricata IDS/IPS on Linux, tuning AF_PACKET ring buffers, and blocking threats in real time.

Security

How to Install and Configure Suricata IDS/IPS on Linux: Real-Time Network Traffic Monitoring and Intrusion Prevention

By IT From Zero October 19, 2026

A detailed comparison of passive IDS and inline IPS architectures for Suricata on Linux. Learn how to configure Suricata with NFQUEUE, tune rulesets, and test real-time threat prevention.

Network

Configuring Traffic Mirroring on Linux with tc-mirred: Copy Packets to IDS/IPS Without Disrupting Service

By IT From Zero June 24, 2026

Traffic Mirroring with tc-mirred lets you copy all packets to a passive IDS/IPS device without disrupting production traffic. This guide walks through configuring both ingress and egress mirroring step by step, along with tips for selective traffic filtering and automating the setup with a systemd service.