Snort FAQ

What are Community Rules?

Community rules refer to all rules that have been submitted by members of the open-source community or Snort Integrators. These rules are freely available to all Snort users and are governed by the GPLv2. As of June 2022, these rules are no longer released daily at 11:40 a.m. ET. Instead, they will be released the same day as the standard ruleset. Most weeks, this is on Tuesday and Thursday but can change based on holidays or urgent vulnerabilities. If you wish to contribute, please send your rules along with and packet captures of the data to the Snort-sigs mailing list: Found here.

The Community ruleset is available for download without registration.

The Community Ruleset is a GPLv2 Talos certified ruleset that is distributed free of charge without any Snort Subscriber Rule Set License restrictions. This ruleset is updated daily and is a subset of the subscriber ruleset. If you are a Snort Subscriber Rule Set Subscriber, the community ruleset is already built into your download. If you are a registered user (under the 30-day delay) you may also include this ruleset in your Snort installation to stay current. The authors of the rules in the community ruleset are listed in the AUTHORS file inside the tarball.