# What's New in Suricata 8: Enhanced Detection and Performance — Eric Leblond, Peter Manev

**URL:** <https://discourse.ossbase.org/t/whats-new-in-suricata-8-enhanced-detection-and-performance-eric-leblond-peter-manev/622>\
**Category:** 2025 talks / workshops\
**Tags:** 2025, talk, hacklu\
**Created:** [August 26, 2025, 8:54am UTC](https://discourse.ossbase.org/t/whats-new-in-suricata-8-enhanced-detection-and-performance-eric-leblond-peter-manev/622 "2025-08-26T08:54:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://discourse.ossbase.org/uploads/default/original/1X/4713f3d4fec85f7513775fc2dd36f548a49f8faa.jpeg) [@system](https://discourse.ossbase.org/u/system)\
**Post date:** [August 26, 2025, 8:54am UTC](https://discourse.ossbase.org/t/whats-new-in-suricata-8-enhanced-detection-and-performance-eric-leblond-peter-manev/622/1 "2025-08-26T08:54:33Z")

</div>

**Join us at hack.lu 2025 — [Info & Registration](https://2025.hack.lu/info/)**

**Duration:** 30 min  
  
**Type:** Talk  
  
**Speakers:** Eric Leblond, Peter Manev

**Abstract**

Suricata is a widely-used high performance, open source network analysis and threat detection software.This talk will provide an overview of the key new features introduced in Suricata 8, the latest release of the open-source network threat detection engine. We will cover the addition of several new protocols, including LDAP, DNS over HTTPS, SIP, SDP, POP3, and websocket, expanding Suricata’s monitoring capabilities. We will also discuss the new “transactional rules” functionality, which allows single signatures to match traffic in both directions.

**Description**

The presentation will highlight some of the more than 100 new keywords available, such as those for entropy matching, domain transform, dataset with JSON context, ENIP matching, full DNS field matching, and enhanced support for SMTP, EMAIL, and FTP. Finally, we will touch on the improvements to performance and security, including the default availability of vendoring and sandboxing Lua, and the implementation of HTTP parsing in Rust.

This talk will be relevant for security analysts and network administrators seeking to leverage the latest advances in Suricata for advanced threat detection and network security monitoring.

[View on pretalx](https://pretalx.com/hack-lu-2025/talk/7NJXCF/)

---

<div class="post-metadata">

**Author:** ![adulau](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/adulau/32/6_2.png) [@adulau](https://discourse.ossbase.org/u/adulau)\
**Post date:** [October 24, 2025, 6:11am UTC](https://discourse.ossbase.org/t/whats-new-in-suricata-8-enhanced-detection-and-performance-eric-leblond-peter-manev/622/2 "2025-10-24T06:11:13Z")

</div>

Video available

[![](https://discourse.ossbase.org/uploads/default/original/1X/bce9dfabb56bf9cb0451e832b7e74ca6df6c091a.jpeg "What's New In Suricata 8: Enhanced Detection And Performance - Peter Manev & Eric Leblond") ](https://www.youtube.com/watch?v=NwWZBc1CFbM)