Snort FAQ

How are rules distributed?

There are two sets of rules distributed on the web site. The “Community Ruleset” is freely available to all users. The “Snort Subscriber Rule Set” will be made available to users in the following ways:

  • Subscribers will receive rulesets in real-time as they are released to Cisco customers - 30 days ahead of registered users
  • Registered users will receive rulesets 30 days after Subscribers.
  • Unregistered users will receive access to the community ruleset.

The rules are available for download here.