Suricata 8.0.8, Snort 3.12.4.0 and Zeek 9.0.1 compared on blocking, patches, cost and migration, with a clear verdict.