snort

Open-source network intrusion detection system. More information: <https://www.snort.org/#documents>.

Install

All systems
curl cmd.cat/snort.sh
Debian Debian
apt-get install snort
Ubuntu
apt-get install snort
Alpine
apk add snort
image/svg+xml Kali Linux
apt-get install snort
Windows (WSL2)
sudo apt-get update sudo apt-get install snort
OS X
brew install snort
Raspbian
apt-get install snort
Dockerfile
dockerfile.run/snort
Docker
docker run cmd.cat/snort snort powered by Commando

Open-source network intrusion detection system. More information: <https://www.snort.org/#documents>.

  • Capture packets with verbose output:
    sudo snort -v -i interface
  • Capture packets and dump application layer data with verbose output:
    sudo snort -vd -i interface
  • Capture packets and display link layer packet headers with verbose output:
    sudo snort -ve -i interface
  • Capture packets and save them in the specified directory:
    sudo snort -i interface -l path/to/directory
  • Capture packets according to rules and save offending packets along with alerts:
    sudo snort -i interface -c path/to/rules.conf -l path/to/directory

© tl;dr; authors and contributors