Snort
snort.org
Spec sheet
- Purpose
- Snort analyzes network traffic using rules to identify malicious activity, generate alerts, and optionally stop matching packets inline.Read 30 Sep 2026 · snort.org
- Integrations
- The site describes integrators as companies distributing Snort or Snort rules in commercial offerings, including vendors, MSSPs, and SIMs.Read 30 Sep 2026 · snort.org
- Support
- Subscribers can submit false-positive or false-negative reports directly to Talos for support, with a ticket assigned for follow-up.Read 30 Sep 2026 · snort.org
- Community help
- The Snort Team, Talos, and others monitor Snort mailing lists and an IRC channel for questions and comments.Read 30 Sep 2026 · snort.org
- Community rules
- The Community Ruleset is freely available, Talos certified, and updated daily.Read 30 Sep 2026 · snort.org
- Detection
- Snort can perform protocol analysis and content matching to detect attacks and probes including buffer overflows, port scans, CGI attacks, and SMB probes.Read 30 Sep 2026 · snort.org
- Download and deployment
- The maker provides Snort 3 source downloads and documents installation guides for CentOS Stream, Oracle Linux, and FreeBSD.Read 30 Sep 2026 · snort.org
- Modes
- Snort can operate as a packet sniffer, packet logger, or network intrusion prevention system.Read 30 Sep 2026 · snort.org
- Ownership
- The site states that Sourcefire was founded in 2001 and acquired by Cisco Systems on October 7, 2013.Read 30 Sep 2026 · snort.org
- Rule freshness
- The Subscriber Ruleset provides the same ruleset developed for Cisco customers, with access 30 days earlier than registered users and coverage in advance of exploits.Read 30 Sep 2026 · snort.org
- Sensor limits
- A subscription covers only the sensors whose licenses were purchased, and Snort defines a sensor as one physical hardware device.Read 30 Sep 2026 · snort.org
- Snort 3
- Snort 3 features multithreaded packet processing, improved scalability, and a plugin system with more than 200 plugins.Read 30 Sep 2026 · snort.org
- Subscriber rules
- Talos develops, tests, and approves Subscriber Rules, which subscribers receive in real time as they are released.Read 30 Sep 2026 · snort.org
Plans and prices
Community Ruleset Free GPLv2 Talos-certified rules; updated daily; subset of the Subscriber Ruleset Read 30 Sep 2026 · snort.org
Snort engine Free GPL v2 software; derived applications redistributed under GPL must provide complete source code Read 30 Sep 2026 · snort.org
Personal $29.99 a year One-year subscription; $29.99 each Per sensor; home network or educational use only; rules available upon release, 30 days faster than registered users Read 30 Sep 2026 · snort.org
Business $399 a year One-year subscription; $399 per sensor Per sensor; production or lab use; no redistribution except as allowed by the license; priority response for false positives and rules Read 30 Sep 2026 · snort.org
Where Specifiction places it
- Intrusion Detection and Prevention Software#14 of 397.7
- Computer Security#12 of 307.8