meer
Meer is a "spooler" for Suricata / Sagan. (by quadrantsec)
sagan
Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather than network packets. (by quadrantsec)
| meer | sagan | |
|---|---|---|
| 1 | 3 | |
| 28 | 147 | |
| - | 3.4% | |
| 3.0 | 6.0 | |
| 11 months ago | about 2 months ago | |
| C | C | |
| GNU General Public License v3.0 only | GNU General Public License v3.0 only |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
meer
Posts with mentions or reviews of meer.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-12-03.
-
Zinc - A lightweight alternative to elasticsearch in Go
I'm really enjoying playing with Zinc. We've been playing with it in house here with Meer (https://github.com/quadrantsec/meer) and ingesting several gigs of Suricata (https://suricata.io) and Sagan (https://github.com/quadrantsec/sagan) logs.
sagan
Posts with mentions or reviews of sagan.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-04-11.
-
Why do NGFW's / Web Security apps talk so much about URL/Application filtering when 99% of companies don't SSL Decrypt?
Relating specifically for inbound traffic : Some architectures do HTTPS termination at the load balancer/reverse proxy. If the web application logs are aggregated in one place (or you're using a cloud WAF service), you can use Sagan to run Snort rules against the requests. It's a band aid, but sometimes you have to make the most of the data you already have.
-
Zinc - A lightweight alternative to elasticsearch in Go
I'm really enjoying playing with Zinc. We've been playing with it in house here with Meer (https://github.com/quadrantsec/meer) and ingesting several gigs of Suricata (https://suricata.io) and Sagan (https://github.com/quadrantsec/sagan) logs.
-
I discovered this tool for SIEM. Any ideas?
You might have to search for a platform that offers both free to use as well as commercial license, they bring the best of both worlds. Being a commercial product they already have most of your log forwarding requirements in place and in the free version it's only a matter of reading the help documents and following the instructions (DIY). Here are some options you could look at- 1) Splunk (Never expires but limits to 500MB per day): https://docs.splunk.com/Documentation/Splunk/7.2.6/Admin/MoreaboutSplunkFree 2) Alienvault (OSSIM) https://www.alienvault.com/products/ossim 3) SIEM Monster (Commercial and opensource License available) https://siemonster.com/download-community-edition/ 4) QuadrantSec Sagan (Commercial and opensource available) https://github.com/quadrantsec/sagan 5) DNIF (just launched, has commercial and community options) https://dnif.it/
What are some alternatives?
When comparing meer and sagan you can also consider the following projects:
Suricata - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
zinc - ZincSearch. A lightweight alternative to elasticsearch that requires minimal resources, written in Go. [Moved to: https://github.com/zinclabs/zinc]
sonic - 🦔 Fast, lightweight & schema-less search backend. An alternative to Elasticsearch that runs on a few MBs of RAM.
tubearchivist - Your self hosted YouTube media server
kilo - Kilo is a multi-cloud network overlay built on WireGuard and designed for Kubernetes (k8s + wg = kg)
zincsearch - ZincSearch . A lightweight alternative to elasticsearch that requires minimal resources, written in Go.