I say this not to brag (it would be a terrible brag, like playing up my Turbo C++ bona fides) but as context for a question:
What are people doing with these things?
When is it making sense for people to be deploying what appears for all the world to be the Kali Linux of Defensive Network Security? I'd be confused to hear about a client deploying Suricata at all --- but Suricata on a dedicated firewall box with a PHP interface? What problem is this solving?
Among the top 10 questions startups ask us when we talk to them about what we do is, "we got this self-assessment questionnaire from a big client and it asks what our IPS is, what IPS should we use?" And we laugh and say "these SAQs were written in the 1990s and lovingly handed down from generation to generation of network security engineers and nobody actually expects you to install an IPS because doing that in a 2018 production environment would be silly, just tell them you only expose ports 80 and 443". And that answer always works. How are people finding a different answer? I'm genuinely asking.