gonids
A Go library for parsing and manipulating Snort and Suricata IDS/IPS rules with Suricata compatibility focus.
What is gonids?
gonids is a Go library for parsing, creating, and optimizing Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) rules used by Suricata and Snort. It solves the problem of programmatically manipulating complex rule syntax for security automation, tooling, and analysis.
Security engineers, DevOps professionals, and developers building security automation tools, rule management systems, or integrations with Suricata/Snort deployments.
It offers a Suricata-focused, correct parser in Go with optimization utilities, enabling reliable rule manipulation without manual string handling, which is especially valuable for large-scale rule management and CI/CD pipelines.
Overview
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
Use Cases
Best For
- Building custom IDS rule management dashboards
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.