Snort
Open-source network intrusion detection and prevention system for Linux and Windows.
Snort is an open-source network intrusion detection and prevention system that analyzes traffic in real time, logs packets, and matches traffic against rules to generate alerts or block malicious packets when run inline. It can be used as a packet sniffer, a packet logger, or a full intrusion prevention system. Rules are distributed as a free Community Ruleset and a paid Subscriber Ruleset from Cisco Talos.
Snort 3 is the current version, with source code available through GitHub and an Oinkcode used to pull rules into an instance. The Subscriber Ruleset is developed, tested, and approved by Cisco Talos and delivered in real time to subscribers; the Community Ruleset is developed by the Snort community and QAed by Cisco Talos. Additional resources include OpenAppID, an IP Block List, preprocessor documentation, and setup guides for platforms such as FreeBSD, CentOS Stream, and OracleLinux.
Snort is available for personal and business use. The Personal subscription is intended for home network or educational use, while the Business subscription covers production or lab environments across organizations. An Integrator option supports integrating Snort into applications for commercial resale. Subscriptions are annual and priced per sensor or per user, with no minimum or upfront fee for integrators.
12 alternatives to Snort
Ranked by how well each tool replaces Snort: shared features, audience, price and popularity.
The most widely used host intrusion detection system
Covers 0 of 15 key features.
Free planOpen source57 out of 100 match$5/moThe most advanced Penetration Testing Distribution. Ever.
Covers 1 of 15 key features.
Free planOpen source57 out of 100 matchFreeThe operating system for cybersecurity operations
Covers 1 of 15 key features.
Free planOpen source57 out of 100 matchContact salesconsensual browsing! - My browser, my choice.
Covers 1 of 15 key features.
Free planOpen source55 out of 100 matchContact sales- 55 out of 100 matchContact sales
- 55 out of 100 match—
A SUID program that restricts the running environment of untrusted applications using the
Covers 1 of 15 key features.
Free planOpen source54 out of 100 matchContact salesAn open source, feature rich firewall and routing platform, offering cutting-edge network
Covers 0 of 15 key features.
Free planOpen source53 out of 100 matchFree- 53 out of 100 match—
Surf the web without annoying pop ups and ads.
Covers 1 of 15 key features.
Free planOpen source53 out of 100 matchFreeA complete suite of tools for assessing WiFi network security
Covers 1 of 15 key features.
Open source53 out of 100 match—