Arch Linux User Repository

Search Criteria

Enter search criteria

Search by

Keywords

Out of Date

Sort by

Sort order

Per page

Package Details: suricata 8.0.5-1

Package Actions

Git Clone URL:	https://aur.archlinux.org/suricata.git (read-only, click to copy)
Package Base:	suricata
Description:	A high performance Network IDS, IPS and Network Security Monitoring engine, Vectorscan instead of hyperscan
Upstream URL:	https://suricata.io/
Licenses:	GPL2
Conflicts:	suricata-nfqueue
Submitter:	Dragonlord
Maintainer:	jskier (amish)
Last Packager:	jskier
Votes:	33
Popularity:	0.000149
First Submitted:	2010-01-03 21:02 (UTC)
Last Updated:	2026-06-10 21:12 (UTC)

Dependencies (18)

jansson (jansson-git^AUR)
libbpf (libbpf-git^AUR)
libcap-ng (libcap-ng-git^AUR)
libmagic.so (file-git^AUR, file)
libmaxminddb (libmaxminddb-git^AUR)
libnet (libnet-git^AUR)
libpcap (libpcap-git^AUR)
libunwind (libunwind-carbon^AUR, libunwind-git^AUR)
libyaml (libyaml-git^AUR)
pcre
python-yaml (python-yaml-git^AUR)
vectorscan^AUR
cbindgen (make)
clang (llvm-git^AUR, clang-minimal-git^AUR, clang17-bin^AUR, clang-static-git^AUR) (make)
llvm (llvm-git^AUR, llvm-minimal-git^AUR) (make)
pkgconf (pkgconf-git^AUR) (make)
rust (rust-beta-bin^AUR, rustup-git^AUR, rust-git^AUR, rustup) (make)
geoipupdate (optional) – GeoIP2 databases

Required by (3)

Sources (4)

Pinned Comments

jskier commented on 2025-10-24 17:05 (UTC)

Pushing 7 latest stable for now, working on getting 8 compiling. I will rework and fork the package to keep 7 going alongside 8, as that is what the suricata team is doing.

If you are interested in co-maintaining and helping with 8 and the fork, please reach out to me - help is always welcome.

Latest Comments

1 2 3 4 5 6 Next › Last »

ozz commented on 2026-06-19 03:29 (UTC) (edited on 2026-06-19 03:29 (UTC) by ozz)

This won't compile if you have rustup installed. I removed rustup and installed the plain "rust" and this was able to build.

jskier commented on 2026-03-29 00:16 (UTC)

@jasonish great idea! I ran a test of this over the weekend. Also note the issue with hyperscan installed going forward (needs to be removed without consideration for the previous suricata dependency). Thank you.

I have not forgotten about the v7 fork. I have had some health issues lately that need to be addressed. Likewise, I anticipate I'll be able to do the work in AUR this summer.

jasonish commented on 2026-03-26 21:51 (UTC)

Any thoughts on depending on Vectorscan instead of Hyperscan. Its been updated more recently.

jskier commented on 2025-10-24 17:05 (UTC)

Pushing 7 latest stable for now, working on getting 8 compiling. I will rework and fork the package to keep 7 going alongside 8, as that is what the suricata team is doing.

If you are interested in co-maintaining and helping with 8 and the fork, please reach out to me - help is always welcome.

SoBC commented on 2023-08-01 10:33 (UTC) (edited on 2023-08-01 10:33 (UTC) by SoBC)

Hi, seems like libunwind and libbpf are missing as dependencies, as configuration yields the following error:

checking for unw_backtrace in -lunwind... no

   libunwind library and development headers not found
   stacktrace on unexpected termination due to signal not possible

checking for elf_begin in -lelf... (cached) yes
checking for bpf_object__open in -lbpf... no

   libbpf library and development headers not found but
   needed to use eBPF code. It can be found at
   https://github.com/libbpf/libbpf

stimunix commented on 2023-05-01 18:46 (UTC)

Hi jskier,

Assuming a search key-id to your name, which one is in use for the package? I'd like to only grab the one I need.

jskier commented on 2023-05-01 16:46 (UTC)

@stimunix, read this: https://wiki.archlinux.org/title/GnuPG#Searching_and_receiving_keys

stimunix commented on 2023-05-01 16:08 (UTC) (edited on 2023-05-01 16:09 (UTC) by stimunix)

Hello, I tried to install the package, however I got the following error.

==> Verifying source file signatures with gpg...
suricata-6.0.10.tar.gz ... FAILED (unknown public key 2BA9C98CCDF1E93A)
==> ERROR: One or more PGP signatures could not be verified!

jnbrains commented on 2023-01-19 16:39 (UTC)

In what way does this package 'conflicts' with rustup!?

jskier commented on 2023-01-06 17:06 (UTC)

@k96hkh, interesting, I was able to replicate this. The run-as config delegates the daemon to the suricata user / group, which is a problem because I believe this fast.log is set to root permissions.

I'll try to think of a solution for this beyond removing run-as from config. If I run suricata-update as suricata user, that error goes away, but it causes this CAP permission error. I have updated the forum posting you referenced for help on this.

1 2 3 4 5 6 Next › Last »