Step 1

Find the appropriate package for your operating system and install.

wget https://www.snort.org/downloads/snort/daq-2.0.6.tar.gz
wget https://www.snort.org/downloads/snort/snort-2.9.8.0.tar.gz
tar xvfz daq-2.0.6.tar.gz
cd daq-2.0.6
./configure && make && sudo make install
tar xvfz snort-2.9.8.0.tar.gz
cd snort-2.9.8.0
./configure --enable-sourcefire && make && sudo make install
yum install https://www.snort.org/downloads/snort/daq-2.0.6-1.f21.x86_64.rpm
yum install https://www.snort.org/downloads/snort/snort-2.9.8.0-1.f21.x86_64.rpm
yum install https://www.snort.org/downloads/snort/daq-2.0.6-1.centos7.x86_64.rpm
yum install https://www.snort.org/downloads/snort/snort-2.9.8.0-1.centos7.x86_64.rpm
pkg install snort
execute: Snort_2_9_8_0_Installer.exe
Step 2
Sign up/Subscribe

Sign up and get your Oinkcode. We recommend that everyone subscribe to get the latest detections. For those unable to subscribe, creating an account on Snort.org will still give you access to the registered user rule packages.

Step 3

Stay current with the latest updates using PulledPork

wget https://www.snort.org/rules/community
tar -xvfz community.tar.gz -C /etc/snort/rules
Download the rule package that corresponds to your snort version.
wget https://www.snort.org/rules/snortrules-snapshot-2976.tar.gz?oinkcode=<oinkcode>
wget https://www.snort.org/rules/snortrules-snapshot-2980.tar.gz?oinkcode=<oinkcode>
tar -xvfz snortrules-snapshot-<version>.tar.gz -C /etc/snort/rules
Downloads
snortrules-snapshot-2976.tar.gz
snortrules-snapshot-2980.tar.gz
opensource.gz
Download the rule package that corresponds to your snort version.
wget https://www.snort.org/rules/snortrules-snapshot-2980.tar.gz?oinkcode=<oinkcode>
wget https://www.snort.org/rules/snortrules-snapshot-2976.tar.gz?oinkcode=<oinkcode>
tar -xvfz snortrules-snapshot-<version>.tar.gz -C /etc/snort/rules
Downloads
snortrules-snapshot-2980.tar.gz
snortrules-snapshot-2976.tar.gz
opensource.gz
Step 4
Read Docs

For more details please reference our install guides on the documents page.

What is Snort?
It is an open source intrusion prevention system capable of real-time traffic analysis and packet logging.
What is Snort?
It is an open source intrusion prevention system capable of real-time traffic analysis and packet logging.

The following setup guides have been contributed by members of the Snort Community for your use. Comments and questions on these documents should be submitted directly to the author by clicking on the name below.
Webcast Slides
Official Documentation
Snort Team / Open Source Community
Additional Resources
Joel Esler
Rule Docs
1-38271
SERVER-OTHER Wavelink Emulation License Server malicious URI code execution attempt
1-38270
SERVER-OTHER Wavelink Emulation License Server HTTP header overflow attempt
1-38269
SERVER-WEBAPP Netgear ReadyNAS Surveillance cgi_system command injection attempt
With over 4 million downloads and over 500,000 registered users, it is the most widely deployed intrusion prevention system in the world.
With over 4 million downloads and over 500,000 registered users, it is the most widely deployed intrusion prevention system in the world.