# Top **URL:** https://forum.suricata.io/top.md?period=monthly [Latest](https://forum.suricata.io/latest.md) · [Categories](https://forum.suricata.io/categories.md) · [Tags](https://forum.suricata.io/tags.md) --- ## [Packetless Application layer interface](https://forum.suricata.io/t/packetless-application-layer-interface/6477)
**Author:** [@cvontela\_microsoft](https://forum.suricata.io/u/cvontela_microsoft)\ **Replies:** 4\ **Last updated:** [October 2, 2026, 9:19pm UTC](https://forum.suricata.io/t/packetless-application-layer-interface/6477 "2026-10-02T21:19:38Z")
Hi Developers, I am evaluating Suricata to provide IDPS for traffic from L3-L7 and I see the drawback is it only accepts packet level input. In our scenario where TLS termination happens later after L3/4 inspection and … --- ## [Libsuricata status](https://forum.suricata.io/t/libsuricata-status/6476)
**Author:** [@cvontela\_microsoft](https://forum.suricata.io/u/cvontela_microsoft)\ **Replies:** 3\ **Last updated:** [October 2, 2026, 9:19pm UTC](https://forum.suricata.io/t/libsuricata-status/6476 "2026-10-02T21:19:45Z")
Hi Devs, I would appreciate your guidance on current status of libsuricata, can you please help answer: What is current maturity and intended use of libsuricata? Is its API considered experimental or suitable for pordu… --- ## [Suricata 8.0.7 "unknown rule keyword 'file.magic'](https://forum.suricata.io/t/suricata-8-0-7-unknown-rule-keyword-file-magic/6479)
**Author:** [@miltsiem](https://forum.suricata.io/u/miltsiem)\ **Replies:** 2\ **Last updated:** [October 4, 2026, 7:56pm UTC](https://forum.suricata.io/t/suricata-8-0-7-unknown-rule-keyword-file-magic/6479 "2026-10-04T19:56:42Z")
Hi there! Please help. I am new to Suricata and I installed Suricata 8.0.7 from source on Debian Trixie 13 and all folders are under /usr/local/… I RTFM, actually sections of it to get Suricata installed and basically … --- ## [Pre-SuriCon 2026 webinar: The Proof is in the Packets, with Zach Chadwick. Tomorrow!](https://forum.suricata.io/t/pre-suricon-2026-webinar-the-proof-is-in-the-packets-with-zach-chadwick-tomorrow/6536)
**Author:** [@jufajardini](https://forum.suricata.io/u/jufajardini)\ **Replies:** 0\ **Last updated:** [October 21, 2026, 2:12pm UTC](https://forum.suricata.io/t/pre-suricon-2026-webinar-the-proof-is-in-the-packets-with-zach-chadwick-tomorrow/6536 "2026-10-21T14:12:18Z")
Happening tomorrow, October 22! Join Zach Chadwick for a Pre-SuriCon webinar, “The Proof Is in the Packets: Working with an LLM to Triage Suricata Alerts,” at 3 PM UTC. Curious about using an LLM to help triage Suricata… --- ## [Suri Oculus 4.0 – Linux packages now available](https://forum.suricata.io/t/suri-oculus-4-0-linux-packages-now-available/6472)
**Author:** [@fil104](https://forum.suricata.io/u/fil104)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 2:30pm UTC](https://forum.suricata.io/t/suri-oculus-4-0-linux-packages-now-available/6472 "2026-09-25T14:30:29Z")
We have published pre-built Linux packages for Suri Oculus 4.0, our network security monitoring and analysis platform built around Suricata. The goal of Suri Oculus is to provide an additional layer for working with Sur… --- ## [Possible NFQUEUE bug: repeat-mark omitted with batchcount \> 1 in workers mode](https://forum.suricata.io/t/possible-nfqueue-bug-repeat-mark-omitted-with-batchcount-1-in-workers-mode/6478)
**Author:** [@cvontela\_microsoft](https://forum.suricata.io/u/cvontela_microsoft)\ **Replies:** 0\ **Last updated:** [October 1, 2026, 9:54pm UTC](https://forum.suricata.io/t/possible-nfqueue-bug-repeat-mark-omitted-with-batchcount-1-in-workers-mode/6478 "2026-10-01T21:54:19Z")
We reproduced an NFQUEUE packet loop with Suricata 8.0.7 when combining workers mode, repeat mode and verdict batching. Suricata is started with: suricata -c /etc/suricata/suricata.yaml -q 1000 –runmode workers Rele… --- ## [RFC: Solaris DLPI inline IPS support](https://forum.suricata.io/t/rfc-solaris-dlpi-inline-ips-support/6528)
**Author:** [@mrehak](https://forum.suricata.io/u/mrehak)\ **Replies:** 2\ **Last updated:** [October 20, 2026, 11:46am UTC](https://forum.suricata.io/t/rfc-solaris-dlpi-inline-ips-support/6528 "2026-10-20T11:46:47Z")
Hello, while deploying Suricata on Oracle Solaris I have asked codex to develop mininal IPS support for Solaris DLPI. I am not keen either on Suricata nor network internals so my understanding of the patch is limited. M… --- ## [Suricata 8.0.7 with NFQUEUE causes outbound TCP connections to hang, even with no OUTPUT queue](https://forum.suricata.io/t/suricata-8-0-7-with-nfqueue-causes-outbound-tcp-connections-to-hang-even-with-no-output-queue/6523)
**Author:** [@sfullak](https://forum.suricata.io/u/sfullak)\ **Replies:** 0\ **Last updated:** [October 9, 2026, 3:02pm UTC](https://forum.suricata.io/t/suricata-8-0-7-with-nfqueue-causes-outbound-tcp-connections-to-hang-even-with-no-output-queue/6523 "2026-10-09T15:02:17Z")
Hello, I’m running Suricata in IPS mode on a public Debian server, using nftables and NFQUEUE. When Suricata is running, new outbound TCP connections from the server can hang, even though the NFQUEUE rule is in the INP… --- ## [Is "detect protocol only one direction" expected for postgres? (nmap -sV weirdness)](https://forum.suricata.io/t/is-detect-protocol-only-one-direction-expected-for-postgres-nmap-sv-weirdness/6474)
**Author:** [@Manan\_Verma](https://forum.suricata.io/u/Manan_Verma)\ **Replies:** 0\ **Last updated:** [September 30, 2026, 9:03am UTC](https://forum.suricata.io/t/is-detect-protocol-only-one-direction-expected-for-postgres-nmap-sv-weirdness/6474 "2026-09-30T09:03:19Z")
is “detect protocol only one direction” expected for postgres? (nmap -sV weirdness) Hey everyone (or @Juliana if you’re the postgres parser developer, save me) — So I’m doing this home-lab thing where I run nmap -sV sc… --- ## [SuriCon 2026 Community discussion](https://forum.suricata.io/t/suricon-2026-community-discussion/6533)
**Author:** [@jufajardini](https://forum.suricata.io/u/jufajardini)\ **Replies:** 0\ **Last updated:** [October 20, 2026, 1:12pm UTC](https://forum.suricata.io/t/suricon-2026-community-discussion/6533 "2026-10-20T13:12:52Z")
For those joining us in person or virtually, it’s time to start thinking about what you’d like to bring to our traditional Suricata Community Discussion! To help you get ready for the sessions, we’ve prepared a blog pos… --- ## [Introducing Verdix: An Open-Source, Local-First AI Copilot for Suricata Alert Triage](https://forum.suricata.io/t/introducing-verdix-an-open-source-local-first-ai-copilot-for-suricata-alert-triage/6532)
**Author:** [@dillonj](https://forum.suricata.io/u/dillonj)\ **Replies:** 0\ **Last updated:** [October 20, 2026, 3:00am UTC](https://forum.suricata.io/t/introducing-verdix-an-open-source-local-first-ai-copilot-for-suricata-alert-triage/6532 "2026-10-20T03:00:28Z")
Hi everyone, I wanted to share a project I’ve been working on I call Verdix (verdix.dev). It’s an open-source, local-first AI copilot designed to help SOC analysts triage Suricata alerts. The idea came from a common pr… --- ## [Layer7 allow and blocks domain to multiple vlans and rules](https://forum.suricata.io/t/layer7-allow-and-blocks-domain-to-multiple-vlans-and-rules/6473)
**Author:** [@ChrisGayle](https://forum.suricata.io/u/ChrisGayle)\ **Replies:** 0\ **Last updated:** [September 28, 2026, 4:36pm UTC](https://forum.suricata.io/t/layer7-allow-and-blocks-domain-to-multiple-vlans-and-rules/6473 "2026-09-28T16:36:39Z")
Please include the following information with your help request: Suricata version Operating system and/or Linux distribution How you installed Suricata (from source, packages, something else) Hello forum I am new to… --- ## [Building a Threat Intelligence Pipeline for Suricata: Architecture, Challenges, and Practical Considerations](https://forum.suricata.io/t/building-a-threat-intelligence-pipeline-for-suricata-architecture-challenges-and-practical-considerations/6537)
**Author:** [@fil104](https://forum.suricata.io/u/fil104)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 1:08pm UTC](https://forum.suricata.io/t/building-a-threat-intelligence-pipeline-for-suricata-architecture-challenges-and-practical-considerations/6537 "2026-10-22T13:08:06Z")
Introduction One of the important challenges in developing network security systems is integrating external Threat Intelligence sources with intrusion detection and prevention mechanisms. Suricata provides a powerful ne…