Side by side
scanlogd vs SELKS
Both stand on intrusion detection and prevention software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan LinuxSelf-hosted
scanlogd is a focused TCP port scan detection tool with several packet-capture options and distribution listings. Readers monitoring fragmented traffic should note the project’s guidance on capture methods.
Visit scanlogd
Free plan Open source LinuxSelf-hostedWeb+1
SELKS provides network detection, monitoring and hunting functions with several deployment options. Its legacy status and lack of planned future releases are important considerations before adopting it.
Visit SELKSThe facts
| scanlogd | SELKS | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Yes |
| Runs on | Linux, Self-hosted | Linux, Self-hosted, Web, Windows |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 1 |
| Maker | Not published | Not published |
| Website | openwall.com | stamus-networks.com |
| On intrusion detection and prevention software | #9 of 39 | #5 of 39 |
scanlogd: what it does well
- Supports raw sockets, libnids, and libpcap capture.
- Release files and signatures are provided.
- Listed in several Linux distributions and OpenWrt.
- Commercial configuration and installation support is available.
What to know first
- The official page lists release 2.2.8.
- The project advises against libpcap alone for fragmented packets.
- Commercial support rates start at US $250/hour with a six-hour minimum.
SELKS: what it does well
- Free under GPL 3.0-or-later
- Manages Suricata rulesets and threat intelligence sources
- Exports event-related session PCAP files
- Docker Compose and Debian ISO deployment options
What to know first
- No releases planned after January 1, 2025
- Not designed for enterprise deployment
Alternatives to scanlogd Alternatives to SELKS The whole list