Snort

Download Snort Rules

Sourcefire Vulnerability Research Team™ (VRT) Rules are the official rules of snort.org. Each rule is developed and tested using the same rigorous standards the VRT uses for Sourcefire customers. These rules are distributed under the VRT Certified Rules License Agreement. This license agreement allows you to study and modify VRT rules but restricts commercial redistribution. There are three ways to obtain these rules:

Subscribers
Real-time access to VRT Certified Rules Updates requires a paid subscription.
For more information on VRT subscriptions click here.

Registered Users
Registered users of Snort.org are able to download and use VRT rules free of charge 30 days after their initial release date.

Integrators
This subscription type is an OEM license for businesses that intend to distribute Sourcefire VRT Certified Rules as part of an integrated product or service offering. For more information on the Snort Integrator program visit: Snort Integrators.

Note: Snort rule packages for Subscribers and Registered Users track the latest patch release for any major version. This means that rule packages may make use of features that only exist in the latest version of Snort. A simple example is: If 2.8.4 is the current version of Snort then the snortrules-snapshot-2.8 packages might use features not available in 2.8.3.2 and earlier.

In accordance with this policy, VRT rules support for Snort 2.8.5.3 will be end of life (EOL) on October 22, 2010, 90 days after the release of Snort 2.8.6.1. Please plan updates accordingly.