Snort

Snort

Cisco
+
+

Related Products

  • Cloudbrink
    28 Ratings
    Visit Website
  • iVerify
    1 Rating
    Visit Website
  • Graylog
    440 Ratings
    Visit Website
  • FusionAuth
    192 Ratings
    Visit Website
  • QuantaStor
    6 Ratings
    Visit Website
  • Redlist
    64 Ratings
    Visit Website
  • Lockbox LIMS
    72 Ratings
    Visit Website
  • Resco Field Service+
    4 Ratings
    Visit Website
  • Gaffa
    5 Ratings
    Visit Website
  • Gemini Enterprise Agent Platform
    1,161 Ratings
    Visit Website

About

SentryWire is a full packet capture appliance and network security monitoring platform built for total network visibility across enterprise, federal, and ICS/OT environments. It retains weeks, months, or years of full-fidelity packet capture data so security teams never lose critical visibility and can investigate threats long after other tools have aged out. It captures, indexes, and retains complete packet data at scale using commodity hardware, distributed storage, and a modular architecture that supports environments ranging from lightweight virtual deployments to enterprise-scale clusters. Unlike packet sniffers that focus only on headers or metadata, SentryWire stores the entire packet stream for forensic replay, deep packet inspection, retrospective analysis, and extended historical investigation. It supports capture rates from 1 Mbps to more than 1 Tbps, with real-time logging, filtering, compression, visualization, and advanced BPF-syntax analysis.

About

Snort is the foremost Open Source Intrusion Prevention System (IPS) in the world. Snort IPS uses a series of rules that help define malicious network activity and uses those rules to find packets that match against them and generates alerts for users. Snort can be deployed inline to stop these packets, as well. Snort has three primary uses: As a packet sniffer like tcpdump, as a packet logger — which is useful for network traffic debugging, or it can be used as a full-blown network intrusion prevention system. Snort can be downloaded and configured for personal and business use alike. Once downloaded and configured, Snort rules are distributed in two sets: The “Community Ruleset” and the “Snort Subscriber Ruleset.” The Snort Subscriber Ruleset is developed, tested, and approved by Cisco Talos. Subscribers to the Snort Subscriber Ruleset will receive the ruleset in real-time as they are released to Cisco customers.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Federal security teams and critical infrastructure operators that need long-term packet evidence to investigate intrusions, validate alerts, and maintain network visibility

Audience

IT teams searching for a network detection and prevention solution

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Not Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version Not Supported
Free Trial Not Supported

Pricing

No information available.
Free Version Not Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 5.0 / 5
ease 3.0 / 5
features 5.0 / 5
design 5.0 / 5
support 5.0 / 5

Pros & Cons from Real Users

Pros

  • Free for any platform not just the web. Has multiple different filter lists to learn about and choose from based off of your needs.

Cons

  • A little bit of a pain to set up on windows if you don't know how to use command prompt.

Training

Documentation Supported
Webinars Not Supported
Live Online Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

SentryWire
United States
www.sentrywire.com

Company Information

Cisco
Founded: 1984
United States
www.snort.org

Alternatives

LiveWire

LiveWire

BlueCat

Alternatives

Snort

Snort

Snort Social
CommView

CommView

TamoSoft

Categories

Packet Capture Supported

Categories

Integrations

A10 Defend Threat Control Supported
BluVector Advanced Threat Detection Supported
Elastic Observability Not Supported
EndaceProbe Not Supported
Extreme Networks Supported
Forcepoint Behavioral Analytics Supported
Fortinet Supported
Gigamon Supported
HP-UX Supported
Keysight Application Threat Intelligence Supported
LogRhythm SIEM Supported
Magnet AXIOM Supported
NXLog Not Supported
Palo Alto ATP Not Supported
Panaseer Not Supported
Picus Not Supported
Project Ares Not Supported
Red Hat OpenShift Supported
ThreatQ Not Supported

Integrations

A10 Defend Threat Control Not Supported
BluVector Advanced Threat Detection Not Supported
Elastic Observability Supported
EndaceProbe Supported
Extreme Networks Not Supported
Forcepoint Behavioral Analytics Not Supported
Fortinet Not Supported
Gigamon Not Supported
HP-UX Not Supported
Keysight Application Threat Intelligence Not Supported
LogRhythm SIEM Not Supported
Magnet AXIOM Not Supported
NXLog Supported
Palo Alto ATP Supported
Panaseer Supported
Picus Supported
Project Ares Supported
Red Hat OpenShift Not Supported
ThreatQ Supported
Claim SentryWire and update features and information
Claim SentryWire and update features and information
Claim Snort and update features and information
Claim Snort and update features and information