all options
stretch  ] [  buster  ] [  bullseye  ] [  sid  ]
[ Source: snort  ]

Package: snort-rules-default (

Links for snort-rules-default


Debian Resources:

Download Source Package snort:


External Resources:

Similar packages:

flexible Network Intrusion Detection System - ruleset

Snort is a libpcap-based packet sniffer/logger which can be used as a lightweight network intrusion detection system. It features rules-based logging and can perform content searching/matching in addition to detecting a variety of other attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, and much more. Snort has a real-time alerting capability, with alerts being sent to syslog, a separate "alert" file, or even to a Windows computer via Samba.

This is the Snort default ruleset, which provides a basic set of network intrusion detection rules developed by the Snort community. They can be used as a basis for development of additional rules. Users using Snort to defend networks in production environments are encouraged to update their local rulesets as described in the included documentation or using the oinkmaster package.

Tags: System Administration: Logging, Monitoring, User Interface: Daemon, Role: role::app-data, role::program, Security: Intrusion Detection, Purpose: Monitoring

Other Packages Related to snort-rules-default

  • depends
  • recommends
  • suggests
  • enhances

Download snort-rules-default

Download for all available architectures
Architecture Package Size Installed Size Files
all 362.7 kB1,864.0 kB [list of files]