Snort

Just released:Snort Subscriber Rule Set Update for 04/07/2015We welcome the introduction of the newest rule release from Talos. In this release we introduced 23 new rules and made modifications to 8 additional rules. There were no changes made to ... [More] the snort.conf in this release.Talos's rule release: Talos has added and modified multiple rules in the blacklist, file-flash, malware-cnc, policy-other and server-webapp rule sets to provide coverage for emerging threats from these technologies. In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats! [Less]

Just released:Snort Subscriber Rule Set Update for 04/02/2015We welcome the introduction of the newest rule release from Talos. In this release we introduced 40 new rules and made modifications to 19 additional rules. There were no changes made to ... [More] the snort.conf in this release.Talos's rule release: Talos has added and modified multiple rules in the blacklist, browser-plugins, exploit-kit, file-flash, indicator-shellcode, malware-cnc, policy-other, protocol-voip and server-webapp rule sets to provide coverage for emerging threats from these technologies. In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats! [Less]

Just released:Snort Subscriber Rule Set Update for 03/31/2015We welcome the introduction of the newest rule release from Talos. In this release we introduced 54 new rules and made modifications to 23 additional rules. There were no changes made to ... [More] the snort.conf in this release.Talos's rule release: Talos has added and modified multiple rules in the blacklist, browser-chrome, browser-ie, exploit-kit, file-flash, file-other, file-pdf, malware-cnc, malware-other, policy-other, protocol-ftp and server-webapp rule sets to provide coverage for emerging threats from these technologies.In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats! [Less]

Snort++ build 144 is now available on snort.org.  We have a number of updates this time for you!New features:ported dns inspectorported ssh inspectoradded doc/usage.txtBug fixes and enhancements:reworked autotools generation of api_options.hupdated ... [More] default manualsapply service from hosts when inspector already bound to flowensure direction and service are applied to packet regardless of flow stateenable active for react / reject only if used in configurationeliminate dedicated nhttp chunk bufferminor nhttp cleanup in StreamSplitterfixed host lookup issuefolded classification.lua and reference.lua into snort_defaults.luaapply defaults from parameter tables instead of relying on ctors etc.fix static analysis issues reported by xcodechange policy names with a-b form to a_b for consistencymake all warnings optionalfix ip and tcp policy definesfix ip and icmp flow client/server ip initadded build foo for lzma; refactored configure.acenhancements for checking compatibility of external pluginsYou can also get the latest updates from github (snortadmin/snort3) which is updated weekly.Please submit bugs, questions, and feedback to [email protected] or the Snort-Users mailing list.Happy Snorting!The Snort Release Team [Less]

Just released:Snort Subscriber Rule Set Update for 03/26/2015We welcome the introduction of the newest rule release from Talos. In this release we introduced 25 new rules and made modifications to 5 additional rules. There were no changes made to ... [More] the snort.conf in this release.Talos's rule release: Talos has added and modified multiple rules in the blacklist, browser-webkit, exploit-kit, file-flash, file-pdf, malware-cnc, server-apache and server-webapp rule sets to provide coverage for emerging threats from these technologies. In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats! [Less]

Just pushed build 143 to github (snortadmin/snort3):added ssh inspectorapply service from hosts when inspector already bound to flowensure direction and service are applied to packet regardless of flow stateenable active for react / reject only if ... [More] used in configurationfixed use of bound ip and tcp policy if not set in hostseliminate dedicated nhttp chunk bufferminor nhttp cleanup in StreamSplitter [Less]

Our own Victor Roemer of the Snort team has taken the time to write up his own VIM configuration for the Snort rules language. I've posted a link to his github page over on the documentation page under "Additional Resources"Thanks Victor!

Just released:Snort Subscriber Rule Set Update for 03/24/2015We welcome the introduction of the newest rule release from Talos. In this release we introduced 20 new rules and made modifications to 16 additional rules. There were no changes made to ... [More] the snort.conf in this release.Talos's rule release: Talos has added and modified multiple rules in the browser-firefox, browser-ie, file-flash, malware-cnc, os-windows and server-webapp rule sets to provide coverage for emerging threats from these technologies. In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats! [Less]

Vladimir Koychev wrote a great document and submitted it into us for inclusion on the documentation page focused specifically on deploying Snort as an IPS on a Virtual Appliance.Check out the document on our documentation page for further information. Thanks Vladimir, some swag is in the mail!

Just released:Snort Subscriber Rule Set Update for 03/19/2015We welcome the introduction of the newest rule release from Talos. In this release we introduced 13 new rules and made modifications to 17 additional rules. There were no changes made to ... [More] the snort.conf in this release.Talos's rule release: Talos has added and modified multiple rules in the blacklist, file-image, file-other, malware-cnc, malware-other and server-other rule sets to provide coverage for emerging threats from these technologies. In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats! [Less]