SNORT

SNORT - Network intrusion detection system

Snort is a network intrusion detection system that performs real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and more.

Snort has three primary uses: as a straight packet sniffer like tcpdump(1), as a packet logger (useful for network traffic debugging, etc), or as a full blown network intrusion detection system. Snort logs packets in either tcpdump(1) binary format or in Snort's decoded ASCII format to logging directories that are named based on the IP address of the "foreign" host. It should work any place libpcap does.

Snort uses a flexible rules language to describe traffic that it should collect or pass, as well as a detection engine that utilizes a modular plugin architecture. It also has real-time alerting capabilities.

Obtaining

Web page http://www.snort.org/
Source tarball http://www.snort.org/dl/snort-2.0.0.tar.gz
Version 2.0.0 (stable) released on 2003-04-14

Licensed under The GNU General Public License, Version 2.

This is not a GNU package.

Documentation

User FAQ available from http://www.snort.org/; see same URL for complete list of documentation; user manpage included in the distribution

Support contacts

Announce List	<snort-announce@lists.sourceforge.net> http://lists.sourceforge.net/mailman/listinfo/snort-announce
Help List	<snort-users@lists.sourceforge.net> http://lists.sourceforge.net/mailman/listinfo/snort-users
Developer List	<snort-devel@lists.sourceforge.net> http://lists.sourceforge.net/mailman/listinfo/snort-devel
Bug List	<roesch@clark.net>, cc: <snort-devel@lists.sourceforge.net>
Support	http://www.sourcefire.com http://www.silicondefense.com

Project contacts

Maintainers	Martin Roesch <roesch@clark.net>
Developers	Martin Roesch <roesch@clark.net> see and the CREDITS file in the distribution for complete list

Related information

Source repository	:pserver:anonymous@cvs.sourceforge.net:/cvsroot/snort http://sourceforge.net/cvs/?group_id=3357
Interfaces	command line
Programs	See /contrib/README file in the distribution for complete list
Source languages	C
Use requirements	libpcap
Build prerequisites	libpcap
Related programs	RazorBack, Snort-rep

Entry information

License verified by	Janet Casey <jcasey@gnu.org> on 2001-07-03
Entry compiled by	Janet Casey <jcasey@gnu.org>

Categories

The copyright licensing notice below applies to this text. The software described in this text has its own copyright notice and license, which can usually be found in the distribution itself.

Permission is granted to copy, distribute, and/or modify this document under the terms of the GNU Free Documentation License, Version 1.1 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover Texts, and with no Back-Cover Texts. A copy of this license is included in the file COPYING.DOC.

Please report any problems in this page to bug-directory@gnu.org, or find out how you can help fix them.

The FSF provides this directory as a service to the free software community. Please consider donating to the FSF to help support this project.