# 使用 Homebrew, apk, apt, dnf, MacPorts, Nix, zypper 安装 suricata

查看 suricata 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:suricata
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install suricata
```

  证据: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install suricata
```

  证据: MacPorts ports tree: net/suricata/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add suricata
```

  证据: Alpine Linux edge package indexes: suricata from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install suricata
```

  证据: Debian stable package indexes: suricata from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install suricata
```

  证据: Fedora Rawhide package metadata: suricata from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#suricata
```

  证据: nixpkgs package indexes: pkgs/by-name/su/suricata/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- zypper (92%):

```sh
sudo zypper install suricata
```

  证据: openSUSE Tumbleweed package metadata: suricata from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## 软件包事实

- **软件包键:** brew:suricata
- **软件包管理器:** Homebrew
- **版本:** 8.0.6
- **来源摘要:** Network IDS, IPS, and security monitoring engine
- **主页:** <https://suricata.io>
- **最后更新:** 2026-07-08T03:17:14Z
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- suricata (别名)
- suricata-update (别名)
- suricatactl (别名)
- suricatasc (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 8.0.6
## 项目历史与用法

Suricata is an open-source network IDS, IPS, and network security monitoring engine developed by the Open Information Security Foundation. In package-manager culture it is a serious operational tool: installed from distro repositories, PPAs, source tarballs, and service packages, then fed rules and packet traffic.

### 项目历史

Suricata's official timeline traces the first code to Victor Julien and Matt Jonkman in 2007, with William Metcalf joining shortly afterward. The first public beta arrived on New Year's Eve 2009, followed by the founding of OISF and the Suricata 1.0 release on March 1, 2010.

The project grew around an open foundation model, training, conferences, and recurring stable release lines. Official documentation describes Suricata as a high-performance IDS, IPS, and network security monitoring engine owned by a community-run non-profit foundation and developed by OISF.

### 采用历史

Suricata is packaged broadly across Unix-like systems. The input package facts list Homebrew, Debian, Ubuntu, Fedora, Alpine, Arch, MacPorts, Nix, and openSUSE names; official download pages also publish source releases, Windows installers, Ubuntu PPA channels, and RPM packages.

Community adoption is also visible in OISF's timeline: public training began in 2013, SuriCon began in 2015, and later SuriCon events drew international users, developers, vendors, and security teams.

### 使用方式

Suricata is typically configured through `suricata.yaml`, run as a packet inspection service or command-line tool, and paired with rule management through `suricata-update`. The quickstart walks users through choosing interfaces, editing `/etc/suricata/suricata.yaml`, installing rules, restarting the service, and reading EVE JSON output.

### 为什么软件包爱好者会关心

Suricata matters to package nerds because it sits at the intersection of kernel packet capture, distro service management, ruleset updates, YAML configuration, JSON logs, and fast C/Rust-ish systems engineering. Installing the package is only the start; the interesting work is wiring rules, interfaces, logs, capabilities, and updates into a reproducible host setup.

### 时间线

- 2007: First Suricata code begins, according to the official timeline.
- 2009: First public beta release occurs on New Year's Eve.
- 2010: OISF is founded and Suricata 1.0 is released.
- 2013: First public in-person Suricata training takes place.
- 2015: First SuriCon is held.
- 2025: Suricata 8.0.0 is released.
- 2026: Official download page lists Suricata 8.0.5 and 7.0.16 as stable releases.

### Related projects

- Suricata is commonly compared or deployed alongside IDS/IPS and network-monitoring ecosystems such as Snort-style rules, Emerging Threats/Open rulesets, Zeek-style monitoring, packet capture tooling, SIEM pipelines, and JSON log processors such as jq.

### 来源

- <https://docs.suricata.io/en/latest/quickstart.html>
- <https://docs.suricata.io/en/latest/what-is-suricata.html>
- <https://suricata.io/download/>
- <https://suricata.io/timeline/>
- input source_facts.package-manager


## 安全说明

没有找到 suricata 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: suricata.yaml, /etc/suricata/suricata.yaml, /usr/local/etc/suricata/suricata.yaml
## 其他软件包管理器记录

- Debian apt - suricata - 1:7.0.10-1+deb13u4: normalized package name match | Debian stable package indexes: suricata from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Next Generation Intrusion Detection and Prevention Tool | https://suricata.io
- Nix - suricata: normalized package name match | nixpkgs package indexes: pkgs/by-name/su/suricata/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - suricata - 1:7.0.3-1build3: normalized package name match | Ubuntu 24.04 LTS package indexes: suricata from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Next Generation Intrusion Detection and Prevention Tool | https://suricata.io
- apk - suricata - 8.0.3-r0: normalized package name match | Alpine Linux edge package indexes: suricata from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | High performance Network IDS, IPS and Network Security Monitoring engine | https://suricata.io/
- apk - suricata-doc - 8.0.3-r0: normalized package name match | Alpine Linux edge package indexes: suricata-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | High performance Network IDS, IPS and Network Security Monitoring engine (documentation) | https://suricata.io/
- apk - suricata-openrc - 8.0.3-r0: normalized package name match | Alpine Linux edge package indexes: suricata-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | High performance Network IDS, IPS and Network Security Monitoring engine (OpenRC init scripts) | https://suricata.io/
- dnf - suricata - 8.0.5-2.fc45: normalized package name match | Fedora Rawhide package metadata: suricata from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Intrusion Detection System | https://suricata.io/
- zypper - libsuricata8_0_6 - 8.0.6-1.2: normalized package name match | openSUSE Tumbleweed package metadata: libsuricata8_0_6 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Open Source Next Generation Intrusion Detection and Prevention Engine Library | https://www.openinfosecfoundation.org/
- zypper - suricata - 8.0.6-1.2: normalized package name match | openSUSE Tumbleweed package metadata: suricata from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Open Source Next Generation Intrusion Detection and Prevention Engine | https://www.openinfosecfoundation.org/
- zypper - suricata-devel - 8.0.6-1.2: normalized package name match | openSUSE Tumbleweed package metadata: suricata-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Development files for the Suricata engine library | https://www.openinfosecfoundation.org/
- MacPorts - suricata: normalized package name match | MacPorts ports tree: net/suricata/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Debian apt - suricata-update - 1.3.4-1: installed executable or alias match | Debian stable package indexes: suricata-update from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | tool for updating Suricata rules | https://github.com/OISF/suricata-update
- Ubuntu apt - suricata-update - 1.3.0-2: installed executable or alias match | Ubuntu 24.04 LTS package indexes: suricata-update from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | tool for updating Suricata rules | https://github.com/OISF/suricata-update


## Combined YAML source

View the package source record on GitHub. [combined/suricata.yml](https://github.com/mxcl/pkgdb/blob/main/combined/suricata.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
