Release of Suricata 3.1!

We are pleased to announce the release of Suricata 3.1. This newest release of Suricata brings significant performance improvements including Hyperscan integration for Multi-Pattern Matcher, NETMAP usability enhancements, and simplifying rule grouping. The team also documented important changes since 3.1RC1 including AF_PACKETv2 is the default as v3 is still experimental and NFQ run mode workers were fixed.

The very best. Fully open source. Actively maintained. Crazy fast capable and accurate. That’s new @Suricata_IDS 3.1,” Michal Purzynski, Mozilla Corporation.

Have a look at the full changelog:

Get the release here:

For information regarding upgrading to Suricata 3.1 see

In a release like this things may not be as polished yet. So please handle with care. That said, if you encounter issues, please let us know! As always, we are doing our best to make you aware of continuing development and items within the engine that are not yet complete or optimal. With this in mind, please notice the list we have included of known items we are working on.

Thank you to the OISF team of developers and the amazing open source community for all the work they did to get Suricata where it is today.  Special thanks for this release goes out to the following:

Intel Corporation
Stamus Networks
AFL project

Mats Klepsland
Andreas Moe
Justin Viiret
Zachary Rasmor
Aleksey Katargin
Alexander Gozman
Arturo Borrero Gonzalez
David Diallo
Torgeir Natvig
Steffen Ullrich