Suricata

Visibility into TCP retransmissions is very useful for network operators to detect and diagnose congestion and packet loss, whether it occurs at the IDS or elsewhere in the network. It looks like Suricata already has a robust capability to detect TCP retransmissions, so this feature request is to introduce a stats counter output that counts those events.