What is Snort?

Snort ® is an open source network intrusion prevention and detection system (IDS/IPS) developed by Sourcefire. Combining the benefits of signature, protocol and anomaly based inspection Snort is the most widely deployed IDS/IPS technology worldwide. With millions of downloads and over 225,000 registered users Snort has become the de facto standard for IPS.

New to Snort?

  1. Requirements

    Before installing Snort you need to verify that you have a number of software packages installed. These are: Libpcap, PCRE, Libnet and Barnyard. Click the requirements button for more information on these packages.

  2. Downloads

    Once the platform is prepared, you need to download and install the Snort Engine. The Snort Engine can be downloaded as source code or binaries for popular operating systems. Click the downloads button for more information about the Snort Engine and how to download.

  3. Rules

    Snort requires a current ruleset to deliver the latest detection capabilities. Snort Rules are distributed separately from the engine. Click the rules button for more information on the rulesets available on Snort.org

  4. Docs

    Users have reams of documentation available, the official docs, a wide array of set-up guides and dozens of Snort books. Click the Docs button for more information on available documentation.

From our Blogs

  • Rule release for today - July 1st 2009

    Remember this post? http://vrt-sourcefire.blogspot.com/2009/04/rule-release-for-today-april ...

    Posted by Nigel Houghton on Jul 01, 2009

  • DojoSec Adobe bug fixed

    Well I've been busy, AFA 2009 CyberSpace Symposium, tracking down cool crashes, booking Def ...

    Posted by Matthew Watchinski on Jun 30, 2009

  • DoJoSec meeting - July 2nd

    Not happening. Some Federal holiday getting in the way of this month's meeting. Firework da ...

    Posted by Nigel Houghton on Jun 30, 2009

Snort News

From the Forums