Snort - Network Intrusion Detection & Prevention System

Step 1

Find the appropriate package for your operating system and install.

wget https://www.snort.org/downloads/snort/daq-2.0.6.tar.gz
                      
wget https://www.snort.org/downloads/snort/snort-2.9.11.tar.gz

tar xvfz daq-2.0.6.tar.gz
                      
cd daq-2.0.6
./configure && make && sudo make install

tar xvfz snort-2.9.11.tar.gz
                      
cd snort-2.9.11
./configure --enable-sourcefire && make && sudo make install

Downloads

daq-2.0.6.tar.gz

snort-2.9.11.tar.gz

daq-2.0.6-1.centos7.x86_64.rpm

yum install https://www.snort.org/downloads/snort/daq-2.0.6-1.f21.x86_64.rpm
                      
yum install https://www.snort.org/downloads/snort/snort-2.9.11-1.f25.x86_64.rpm

Downloads

daq-2.0.6-1.f21.x86_64.rpm

snort-2.9.11-1.f25.x86_64.rpm

yum install https://www.snort.org/downloads/snort/daq-2.0.6-1.centos7.x86_64.rpm
                      
yum install https://www.snort.org/downloads/snort/snort-2.9.11-1.centos7.x86_64.rpm

Downloads

daq-2.0.6-1.centos7.x86_64.rpm

snort-2.9.11-1.centos7.x86_64.rpm

pkg install snort

execute: Snort_2_9_11_Installer.exe

Downloads

Snort_2_9_11_Installer.exe

Step 2

Sign up and get your Oinkcode. We recommend that everyone subscribe to get the latest detections. For those unable to subscribe, creating an account on Snort.org will still give you access to the registered user rule packages.

Step 3

Stay current with the latest updates using PulledPork

wget https://www.snort.org/downloads/community/community-rules.tar.gz -O community-rules.tar.gz

tar -xvfz community.tar.gz -C /etc/snort/rules

Downloads

opensource.gz

community-rules.tar.gz

snort3-community-rules.tar.gz

Download the rule package that corresponds to your Snort version, for more information on how to retreive your oinkcode.

wget https://www.snort.org/rules/snortrules-snapshot-2990.tar.gz?oinkcode=<oinkcode> -O snortrules-snapshot-2990.tar.gz
wget https://www.snort.org/rules/snortrules-snapshot-2983.tar.gz?oinkcode=<oinkcode> -O snortrules-snapshot-2983.tar.gz
wget https://www.snort.org/rules/snortrules-snapshot-29110.tar.gz?oinkcode=<oinkcode> -O snortrules-snapshot-29110.tar.gz

tar -xvfz snortrules-snapshot-<version>.tar.gz -C /etc/snort/rules

Downloads

snortrules-snapshot-2990.tar.gz

snortrules-snapshot-2983.tar.gz

snortrules-snapshot-29110.tar.gz

opensource.gz

Download the rule package that corresponds to your Snort version, for more information on how to retreive your oinkcode.

wget https://www.snort.org/rules/snortrules-snapshot-29110.tar.gz?oinkcode=<oinkcode> -O snortrules-snapshot-29110.tar.gz
wget https://www.snort.org/rules/snortrules-snapshot-2990.tar.gz?oinkcode=<oinkcode> -O snortrules-snapshot-2990.tar.gz
wget https://www.snort.org/rules/snortrules-snapshot-2983.tar.gz?oinkcode=<oinkcode> -O snortrules-snapshot-2983.tar.gz

tar -xvfz snortrules-snapshot-<version>.tar.gz -C /etc/snort/rules

Downloads

snortrules-snapshot-29110.tar.gz

snortrules-snapshot-2990.tar.gz

opensource.gz

snortrules-snapshot-2983.tar.gz

Step 4

Read Docs

For more details please reference our install guides on the documents page.

Documents

The following setup guides have been contributed by members of the Snort Community for your use. Comments and questions on these documents should be submitted directly to the author by clicking on the name below.

Official Documentation

Snort Users Manual