This is the official Snort FAQ/Wiki repository. It was moved from the Snort.org site to Github to allow people to contribute to it through pull requests.
To checkout all the files:
git clone git://github.com/vrtadmin/snort-faq.git
What is Snort?
What is Open Source?
What can I do with Snort?
Where can I download Snort?
What is the relationship between Snort and Cisco?
Does Cisco sell Snort?
What is a Snort Integrator?
What is the role of Talos?
I'm not receiving alerts in Snort
I'm receiving an error regarding IP Datagram length, what is the problem?
My Snort log is an empty file, what could be the cause?
Can I have help with my homework?
What is the list of Snort Supported OSes
What is the mailing list etiquette?
How do I submit questions about Snort?
How do I ask a good question on the Snort list?
What is a registered user?
Why do I need to register?
What if I do not wish to register?
Will my information be shared with any other parties or used for marketing?
How can I provide feedback or suggestions for the site?
Abuse of Snort.org
What is a Snort rule?
What is a signature?
What is a vulnerability?
What is an exploit?
What is a protocol?
What are Community Rules?
What are Snort Subscriber Rule Set?
What is a user-defined rule?
Why are rules commented out by default?
How are rules distributed?
Resolving Flowbit Dependancies
What are the differences in the rule sets?
Shared Object Rules
Snort Subscriber Rule Set Subscription
What does having a Snort Subscriber Rule Set subscription entitle me to?
Do I have to subscribe to receive the Snort Subscriber Rule Set?
How much does a subscription cost?
If I purchase a subscription, can I deploy the rules on more than one sensor?
Can I use tools such as PulledPork to manage the subscription?
Where do I go to subscribe to the Snort Subscriber Rule Set?
What is the GNU GPL?
What is the Snort Subscriber Rule Set License Agreement?/
What is the Snort Integrator License?
How is the Snort software licensed?
Why are the rules licensed separately from the software?
What license is used if I contribute code for the Snort Engine?
What license is used if I contribute a rule for Snort?
All the READMEs from the Snort tarball are uploaded here for simple indexing and reading.