Snort Official Documentation
The official documentation produced by the Snort team at Sourcefire
| Title | Author |
|---|---|
Snort Users Manual |
Snort Team |
| Snort FAQ | Snort Team |
| The Snort Manual (HTML) | Snort Team |
Snort Setup Guides
The following setup guides have been contributed by members of the Snort Community for your use. Comments and questions on these documents should be submitted directly to the author. Authors who want comments and feedback may be emailed by clicking on their names below.
If you have a document you’d like to contribute to the Snort community contact us at snort-team@sourcefire.com.
Snort Startup Scripts
These scripts are intended to get you started with the startup, reload, and shutdown of Snort on the OSes listed below.
Snort Deployment Guides
The following deployment guides have been contributed by members of the Snort Community for your use. If you have a document you’d like to contribute to the Snort community contact us at snort-team@sourcefire.com.
Snort Related Whitepapers
The following Whitepapers have been written by Sourcefire employees and may help with your Snort deployment. For further information on these papers, please email snort-team@sourcefire.com
| Title | Author |
|---|---|
| VRT Methodology Whitepaper |
Sourcefire Vulnerability Research Team (VRT) |
| Improving your Custom Snort Rules |
Leon Ward |
| Inline Normalization using Snort 2.9.0 |
Russ Combs |
| Using Perfmon and Performance Profiling to Tune Snort Preprocessors and Rules |
Steven Sturges |
| HTTP Evasions Revisited |
Daniel Roelker |
| Target Based Fragmentation Reassembly |
Judy Novak |
| Target Based Stream Reassembly |
Judy Novak |
