snort3/snort3

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Open Source Deep Packet Inspection Software Toolkit