Snort

Snort

Cisco
Zeek

Zeek

The Zeek Project
+
+

Related Products

  • Blumira
    150 Ratings
    Visit Website
  • Cloudbrink
    28 Ratings
    Visit Website
  • HostZealot
    307 Ratings
    Visit Website
  • Emtrain
    53 Ratings
    Visit Website
  • Setplex
    10 Ratings
  • Signalmash
    16 Ratings
    Visit Website
  • UptimeRobot
    880 Ratings
    Visit Website
  • Notifyre
    63 Ratings
    Visit Website
  • Monk
    8 Ratings
    Visit Website
  • CBT Nuggets
    493 Ratings
    Visit Website

About

Snort is the foremost Open Source Intrusion Prevention System (IPS) in the world. Snort IPS uses a series of rules that help define malicious network activity and uses those rules to find packets that match against them and generates alerts for users. Snort can be deployed inline to stop these packets, as well. Snort has three primary uses: As a packet sniffer like tcpdump, as a packet logger — which is useful for network traffic debugging, or it can be used as a full-blown network intrusion prevention system. Snort can be downloaded and configured for personal and business use alike. Once downloaded and configured, Snort rules are distributed in two sets: The “Community Ruleset” and the “Snort Subscriber Ruleset.” The Snort Subscriber Ruleset is developed, tested, and approved by Cisco Talos. Subscribers to the Snort Subscriber Ruleset will receive the ruleset in real-time as they are released to Cisco customers.

About

Zeek (formerly Bro) is the world’s leading platform for network security monitoring. Flexible, open source, and powered by defenders. Zeek has a long history in the open source and digital security worlds. Vern Paxson began developing the project in the 1990s under the name “Bro” as a means to understand what was happening on his university and national laboratory networks. Vern and the project’s leadership team renamed Bro to Zeek in late 2018 to celebrate its expansion and continued development. Zeek is not an active security device, like a firewall or intrusion prevention system. Rather, Zeek sits on a “sensor,” a hardware, software, virtual, or cloud platform that quietly and unobtrusively observes network traffic. Zeek interprets what it sees and creates compact, high-fidelity transaction logs, file content, and fully customized output, suitable for manual review on disk or in a more analyst-friendly tool like a security and information event management (SIEM) system.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

IT teams searching for a network detection and prevention solution

Audience

Organizations interested in an open source network security monitoring tool

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Not Supported

API

Offers API Not Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version Not Supported
Free Trial Not Supported

Pricing

Free
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 5.0 / 5
ease 3.0 / 5
features 5.0 / 5
design 5.0 / 5
support 5.0 / 5

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Pros & Cons from Real Users

Pros

  • Free for any platform not just the web. Has multiple different filter lists to learn about and choose from based off of your needs.

Cons

  • A little bit of a pain to set up on windows if you don't know how to use command prompt.

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Cisco
Founded: 1984
United States
www.snort.org

Company Information

The Zeek Project
Founded: 1994
United States
zeek.org

Alternatives

Alternatives

CloudShark

CloudShark

QA Cafe
Snort

Snort

Snort Social
AtlasCyber

AtlasCyber

CrunchAtlas

Categories

Categories

Network Monitoring Supported
Network Security Supported

Integrations

Elastic Observability Supported
NXLog Supported
Cybraics Not Supported
Dropzone AI Not Supported
EndaceProbe Supported
IronNet Collective Defense Platform Not Supported
Joe Sandbox Supported
LimaCharlie Not Supported
Malcolm Not Supported
Observe Not Supported
Onum Not Supported
Palo Alto ATP Supported
Panaseer Supported
Picus Supported
Project Ares Supported
Security Onion Not Supported
ThreatQ Supported
Wraith Not Supported
cPacket Not Supported

Integrations

Elastic Observability Supported
NXLog Supported
Cybraics Supported
Dropzone AI Supported
EndaceProbe Not Supported
IronNet Collective Defense Platform Supported
Joe Sandbox Not Supported
LimaCharlie Supported
Malcolm Supported
Observe Supported
Onum Supported
Palo Alto ATP Not Supported
Panaseer Not Supported
Picus Not Supported
Project Ares Not Supported
Security Onion Supported
ThreatQ Not Supported
Wraith Supported
cPacket Supported
Claim Snort and update features and information
Claim Snort and update features and information
Claim Zeek and update features and information
Claim Zeek and update features and information