Snort is open source intrusion detection (IDS) software. It is used to detect network attacks, intrusions and other security threats.
It performs a variety of packet analyzes to detect known attack signatures or abnormal behavior. Snort also provides advanced features such as protocol detection, content analysis, network flow pattern detection and reporting.
It can run in pre-processing mode to speed up intrusion detection, or in post-processing mode for detailed analysis.