suricata/doc/userguide
Shivani Bhardwaj 899eb38691
Some checks failed
builds / Prepare dependencies (push) Has been cancelled
builds / Prepare cbindgen (push) Has been cancelled
CodeQL (Rust/C) / Analyze (push) Has been cancelled
docs / Prepare dependencies (push) Has been cancelled
docs / Prepare cbindgen (push) Has been cancelled
Nix Env Build / tests (push) Has been cancelled
Scan-build / Scan-build (push) Has been cancelled
Scorecards supply-chain security / Scorecards analysis (push) Has been cancelled
builds / AlmaLinux 10 (schema, plugins) (push) Has been cancelled
builds / AlmaLinux 9 (schema, rust-checks) (push) Has been cancelled
builds / AlmaLinux 9 Test Templates (push) Has been cancelled
builds / Build RPMs (push) Has been cancelled
builds / AlmaLinux 8 (push) Has been cancelled
builds / CentOS Stream 9 (push) Has been cancelled
builds / Fedora 44 (Suricata Verify codecov) (push) Has been cancelled
builds / Fedora 44 (clang, debug, asan, wshadow, rust-strict, systemd) (push) Has been cancelled
builds / Fedora 44 (gcc, debug, flto, asan, wshadow, rust-strict) (push) Has been cancelled
builds / Fedora 44 (non-root, debug, clang, asan, wshadow, rust-strict, no-ja) (push) Has been cancelled
builds / AlmaLinux 9 (no jansson) (push) Has been cancelled
builds / AlmaLinux 9 (Minimal/Recommended Build) (push) Has been cancelled
builds / Ubuntu 24.04 (cocci) (push) Has been cancelled
builds / Ubuntu 24.04 (RUSTC+CARGO vars) (push) Has been cancelled
builds / Ubuntu 24.04 (unittests coverage) (push) Has been cancelled
builds / Ubuntu 24.04 (unix socket mode coverage) (push) Has been cancelled
builds / Ubuntu 24.04 (afpacket and dpdk coverage) (push) Has been cancelled
builds / Ubuntu 24.04 (pcap unix socket ASAN) (push) Has been cancelled
builds / Ubuntu 24.04 (afpacket IPS tests in namespaces) (push) Has been cancelled
builds / Ubuntu 24.04 (afpacket and dpdk live tests with ASAN) (push) Has been cancelled
builds / Ubuntu 24.04 (fuzz corpus coverage) (push) Has been cancelled
builds / Ubuntu 20.04 (-DNDEBUG) (push) Has been cancelled
builds / Ubuntu 20.04 (unsupported rust) (push) Has been cancelled
builds / Ubuntu 22.04 (Debug Validation) (push) Has been cancelled
builds / Ubuntu 22.04 (Fuzz) (push) Has been cancelled
builds / Ubuntu 22.04 (Netmap build) (push) Has been cancelled
builds / Ubuntu 22.04 (Minimal/Recommended Build) (push) Has been cancelled
builds / Ubuntu 22.04 (DPDK Build) (push) Has been cancelled
builds / Debian 12 (xdp) (push) Has been cancelled
builds / Debian 13 (xdp) (push) Has been cancelled
builds / Ubuntu 22.04 Dist Builder (push) Has been cancelled
builds / Debian 12 MSRV (push) Has been cancelled
builds / Debian 11 (push) Has been cancelled
builds / MacOS Latest (push) Has been cancelled
builds / FreeBSD 15.0 (push) Has been cancelled
builds / Windows MSYS2 MINGW64 (NPcap) (push) Has been cancelled
builds / Windows MSYS2 MINGW64 (libpcap) (push) Has been cancelled
builds / Windows MSYS2 UCRT64 (libpcap) (push) Has been cancelled
builds / Windows MSYS2 MINGW64 (WinDivert) (push) Has been cancelled
builds / PF_RING (push) Has been cancelled
docs / Ubuntu 22.04 Dist Builder (push) Has been cancelled
flowbits: deprecate toggle command
toggle command is not used by any major rulesets and increases the state
complexity of flowbits management. Also, all operations can be carried
out with the combination of other available commands. So, remove it.

Task 8595
2026-06-05 12:38:59 +00:00
..
3rd-party-integration doc/userguide: new 3rd party section, add bluecoat 2019-03-05 11:41:08 +01:00
_static doc/userguide: avoid horizontal scroll on rtd 2023-07-15 17:12:51 +02:00
appendix doc: adjust for master to main rename 2025-09-16 17:20:56 +02:00
capture-hardware doc: minor ebpf doc update for fedora/rhel 2026-05-28 20:49:56 +00:00
configuration doc/firewall: update hooks & configuration examples 2026-06-03 18:02:20 +00:00
devguide http2: split progress per direction 2026-06-02 21:16:54 +00:00
file-extraction doc: minor verbiage tweaks and reST fix 2025-10-18 03:53:40 +02:00
firewall doc/firewall: update hooks & configuration examples 2026-06-03 18:02:20 +00:00
install doc/userguide: update windivert instructions 2025-12-11 04:30:42 +00:00
ips src: doc: remove double-space typos 2026-01-04 08:11:43 +00:00
licenses doc: convert fancy quotes to straight quotes 2019-06-17 20:09:08 +02:00
lua http-log: remove support for http-log 2026-06-02 06:26:11 +00:00
manpages doc: improve manpage of suricatasc 2026-05-19 19:37:20 +00:00
output doc: dhcp eve note for option 52 overload 2026-06-05 12:38:55 +00:00
partials ntp: add transaction logging 2026-04-16 16:10:34 -06:00
performance http-log: remove support for http-log 2026-06-02 06:26:11 +00:00
plugins doc/ndpi: move ndpi docs to new plugins section 2025-03-29 22:14:00 +01:00
protocols doc/userguide: add initial protocols overview 2025-09-23 21:32:15 +02:00
reputation doc: spelling 2023-05-08 11:59:32 +02:00
rule-management userguide: add references to rules/README to docs 2026-03-10 14:18:47 +00:00
rules flowbits: deprecate toggle command 2026-06-05 12:38:59 +00:00
upgrade doc: upgrade notes for changes to ike output 2025-10-06 19:56:12 +02:00
.gitignore doc/userguide: generate eve documentation 2024-10-07 22:28:04 +02:00
acknowledgements.rst doc: Add missing contributors to ack file 2025-06-05 19:14:36 +02:00
command-line-options.rst doc: Improve grammar, spelling and clarifications 2020-09-03 13:11:40 +02:00
conf.py doc: address config conversion note 2026-05-10 21:12:29 +00:00
convert.py doc/optimization: move "convert.py" to Python3 2023-05-05 11:11:26 +02:00
docutils.conf doc: add docutils.conf to disable smart quotes 2023-05-05 18:59:33 +02:00
generate-evedoc.sh doc/userguide: generate eve documentation 2024-10-07 22:28:04 +02:00
index.rst doc/userguide: add initial protocols overview 2025-09-23 21:32:15 +02:00
initscripts.rst doc: Improve grammar, spelling and clarifications 2020-09-03 13:11:40 +02:00
install.rst docs: use correct suricata version mentions 2026-01-14 12:49:11 +00:00
make-sense-alerts.rst doc: Improve grammar, spelling and clarifications 2020-09-03 13:11:40 +02:00
Makefile.am userguide/Makefile: don't add "install" to EXTRA_DIST 2026-02-13 13:34:26 +00:00
Makefile.sphinx doc: hook sphinx into build 2016-09-28 13:11:10 +02:00
public-data-sets.rst doc: add more public datasets 2026-02-25 17:57:34 +00:00
quickstart.rst doc: move more rules to dedicated css container 2026-04-26 15:21:01 +00:00
README.md devguide: move into userguide as last chapter 2022-03-29 07:56:03 +02:00
requirements.txt docs: adjust readthedocs config to new options 2023-10-06 21:28:15 +02:00
security.rst doc: fix typo /var/run/suricata in file permissions docs. 2025-09-20 09:08:40 +02:00
support-status.rst devguide: make 'contributing' a chapter 2024-01-04 15:51:21 +01:00
unix-socket.rst doc: adjust for master to main rename 2025-09-16 17:20:56 +02:00
upgrade.rst flowbits: deprecate toggle command 2026-06-05 12:38:59 +00:00
verifying-source-files.rst docs: use correct suricata version mentions 2026-01-14 12:49:11 +00:00
what-is-suricata.rst doc: Improve grammar, spelling and clarifications 2020-09-03 13:11:40 +02:00

Suricata User Guide

This directory contains the Suricata Guide. The Suricata Developer's guide is included as a chapter of the Guide. The Sphinx Document Generator is used to build the documentation. For a primer os reStructuredText see the reStructuredText Primer.

Verifying Changes

There are a number of output formats to choose from when making the source documentation locally (e.g. html, pdf, man).

The documentation source can be built with make -f Makefile.sphinx html. Substitute the 'html' word for desired output format.

There are different application dependencies based on the output desired.