What is Snort?

What is Snort?

It is an open source intrusion prevention system capable of real-time traffic analysis and packet logging.
With over 4 million downloads and nearly 500,000 registered users, it is the most widely deployed intrusion prevention system in the world.
By leveraging the flexibility of the Snort rules language, Talos is able to provide detection and prevention capabilities well in advance of an actual threat.

Get Started

Step 1

Find the appropriate package for your operating system and install.

Windows

execute: Snort_2_9_7_5_Installer.exe

Downloads

Snort_2_9_7_5_Installer.exe

Step 2

Sign up and get your Oinkcode. We recommend that everyone subscribe to get the latest detections. For those unable to subscribe, creating an account on Snort.org will still give you access to the registered user rule packages.

Step 3

Stay current with the latest updates using PulledPork
Community rules

wget https://www.snort.org/rules/community
tar -xvfz community.tar.gz -C /etc/snort/rules

Downloads

community-rules.tar.gz
opensource.tar.gz

Step 4

Read Docs
For more details please reference our install guides on the documents page.