What is Snort?

Snort® is an open source network intrusion prevention and detection system (IDS/IPS) developed by Sourcefire. Combining the benefits of signature, protocol and anomaly-based inspection, Snort is the most widely deployed IDS/IPS technology worldwide. With millions of downloads and over 270,000 registered users, Snort has become the de facto standard for IPS.

New to Snort?

  1. Requirements

    Before installing Snort you need to verify that you have a number of software packages installed. These are: Libpcap, PCRE, Libnet and Barnyard. Click the requirements button for more information on these packages.

  2. Downloads

    Once the platform is prepared, you need to download and install the Snort Engine. The Snort Engine can be downloaded as source code or binaries for popular operating systems. Click the downloads button for more information about the Snort Engine and how to download.

  3. Rules

    Snort requires a current ruleset to deliver the latest detection capabilities. Snort Rules are distributed separately from the engine. Click the rules button for more information on the rulesets available on Snort.org

  4. Docs

    Users have reams of documentation available, the official docs, a wide array of set-up guides and dozens of Snort books. Click the Docs button for more information on available documentation.

From our Blogs

Snort News

From the Forums

  • Error initializing rule chain with snort 2.8.5

    New topic "Error initializing rule chain with snort 2.8.5" is in forum "Snort Newbies" w ...

    Posted on Feb 09, 2010

  • pcre dfa

    New topic "pcre dfa" is in forum "Snort Development" with 1 replies.

    Posted on Feb 08, 2010

  • snort reload

    New topic "snort reload" is in forum "Snort Newbies" with 3 replies.

    Posted on Feb 08, 2010