Snort

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Snort is ranked #14 of 35 in intrusion detection and prevention software on Inferse. It runs on Linux, Self-hosted. There is a free plan. Paid plans start at $2.50/mo.

Compared on intrusion detection and prevention software

Free plan: Yessnort.org
Deployment model: softwaresnort.org
Network scope: networksnort.org
Inline blocking: Yessnort.org
Encrypted traffic inspection: Yessnort.org
Threat intelligence: Yessnort.org
Supported platforms: linuxsnort.org

Facts

Purpose: Snort analyzes network traffic using rules to identify malicious activity, generate alerts, and optionally stop matching packets inline.snort.org · 30 Sept 2026
Modes: Snort can operate as a packet sniffer, packet logger, or network intrusion prevention system.snort.org · 30 Sept 2026
Detection: Snort can perform protocol analysis and content matching to detect attacks and probes including buffer overflows, port scans, CGI attacks, and SMB probes.snort.org · 30 Sept 2026
Snort 3: Snort 3 features multithreaded packet processing, improved scalability, and a plugin system with more than 200 plugins.snort.org · 30 Sept 2026
Community rules: The Community Ruleset is freely available, Talos certified, and updated daily.snort.org · 30 Sept 2026
Subscriber rules: Talos develops, tests, and approves Subscriber Rules, which subscribers receive in real time as they are released.snort.org · 30 Sept 2026
Rule freshness: The Subscriber Ruleset provides the same ruleset developed for Cisco customers, with access 30 days earlier than registered users and coverage in advance of exploits.snort.org · 30 Sept 2026
Sensor limits: A subscription covers only the sensors whose licenses were purchased, and Snort defines a sensor as one physical hardware device.snort.org · 30 Sept 2026
Integrations: The site describes integrators as companies distributing Snort or Snort rules in commercial offerings, including vendors, MSSPs, and SIMs.snort.org · 30 Sept 2026
Support: Subscribers can submit false-positive or false-negative reports directly to Talos for support, with a ticket assigned for follow-up.snort.org · 30 Sept 2026
Community help: The Snort Team, Talos, and others monitor Snort mailing lists and an IRC channel for questions and comments.snort.org · 30 Sept 2026
Download and deployment: The maker provides Snort 3 source downloads and documents installation guides for CentOS Stream, Oracle Linux, and FreeBSD.snort.org · 30 Sept 2026
Ownership: The site states that Sourcefire was founded in 2001 and acquired by Cisco Systems on October 7, 2013.snort.org · 30 Sept 2026