This overcomes the blindness that Snort has to own signatures break up about several TCP packets. Suricata waits until finally most of the data in packets is assembled just before it moves the data into Evaluation.It supports a wide range of log sources and will quickly correlate details to spotlight irregular designs, including unauthorized access