snort3/snort3

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

3409 stars · 687 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Snort 3 (Snort++) is the next-generation open-source intrusion prevention system (IPS) written in C++17, supporting multi-threaded packet processing, pluggable components, and Lua-scriptable configuration. It inspects network traffic in real time using rules to detect and prevent intrusions.

Use cases

• detect network intrusions on my network
• run an open-source intrusion prevention system
• inspect network packets for malicious traffic
• write custom rules to block network attacks
• monitor network traffic in real time
• replace Snort 2 with a multi-threaded IPS
• deep packet inspection for security monitoring

When to choose

• you need a proven, actively maintained network IPS/IDS with a large rule ecosystem
• you want multi-threaded packet processing for high-throughput networks
• you need scriptable, pluggable network inspection with Lua configuration

When to avoid

• you need a simple host-based firewall rather than network traffic inspection
• you require full Windows support, which is still on the roadmap
• you want a zero-configuration security tool; Snort requires significant rule and config tuning

Facets

application · maturity active

security networking monitoring plugin-system parser security networking monitoring developer-tools windows cpp cross-platform intrusion-prevention-system ips ids packet-inspection network-security snort traffic-analysis lua-configuration linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="snort3/snort3")