Software Alternatives & Reviews

snort VS tcpdump

Compare snort VS tcpdump and see what are their differences

snort logo snort

Snort is a free and open source network intrusion prevention system.

tcpdump logo tcpdump

tcpdump is a common packet analyzer that runs under the command line.
  • snort Landing page
    Landing page //
    2022-06-20
  • tcpdump Landing page
    Landing page //
    2023-04-27

snort

Categories
  • Cyber Security
  • Security & Privacy
  • Tool
  • Cloud Computing
Website snort.org
Details $-

tcpdump

Categories
  • Monitoring Tools
  • Log Management
  • Security
  • Productivity
Website tcpdump.org
Details $

snort videos

Network Intrusion Detection Systems (SNORT)

More videos:

  • Review - Intrusion Detection System for Windows (SNORT)
  • Review - Massive Beer Review 2692 Bolero Snort Brewing Crushable Hazie IPA

tcpdump videos

Tcpdump - Protocol Review 5 (TCP)

More videos:

  • Review - Tcpdump - Protocol Review 3 (UDP)
  • Review - Tcpdump - Protocol Review 4 (DNS) - Draft

Category Popularity

0-100% (relative to snort and tcpdump)
Security & Privacy
100 100%
0% 0
Monitoring Tools
37 37%
63% 63
Cyber Security
100 100%
0% 0
Log Management
0 0%
100% 100

User comments

Share your experience with using snort and tcpdump. For example, how are they different and which one is better?
Log in or Post with

Reviews

These are some of the external sources and on-site user reviews we've used to compare snort and tcpdump

snort Reviews

8 Best Open Source SIEM Tools
Snort is an open-source intrusion detection and prevention system that you can use for real-time network traffic analysis and packet logging on IP networks. You can also use Snort to detect attacks or possible probes. You can configure Snort to work in three main modes:
Source: www.logiq.ai
The Top 14 Free and Open Source SIEM Tools For 2022
It is also equipped with log analysis capabilities and the ability to display traffic or dump streams of packets to log files. Users have access to a user manual, FAQ file and guides on how to locate and use Oinkcode. Snort has three great uses:
Source: logit.io

tcpdump Reviews

6 Best Wireshark Alternatives for Windows and macOS
The quickness that you can have with tcpdump over Wireshark is awesome. It is one of those tools that many network administrators prefer whenever they need to take a look at the actual network packets that are being transmitted. The Tcpdump is not as feature rich as Wireshark but the output of its packet dump can be used as input by other programs. Moreover, It can be used...
Source: techwiser.com

Social recommendations and mentions

Based on our record, snort seems to be more popular. It has been mentiond 6 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.

snort mentions (6)

  • Who does check linux distros of malware - open source
    Linux has (free) tools to improve security and detect/remove malware: Lynis,Chkrootkit,Rkhunter,ClamAV,Vuls,LMD,radare2,Yara,ntopng,maltrail,Snort,Suricata... Source: 4 months ago
  • NETGATE 4100 - Snort Fatal Error on new install
    Okay I figured it out. The problem occurs when you're only using the community rules for Snort. If you go to snort.org and register for a free or subscriber "oink" code, enter the code in pfSense and update the rules then it magically works as expected. My best guess is that unicode information get's added when the new rules are updated. At any rate, this worked for me. Source: about 1 year ago
  • Trying to learn Rogue Device Detection
    Snort (not an insult) https://snort.org/. Source: almost 2 years ago
  • Snort Subscriber Ruleset - Not Downloaded - error code 422 - md5 download failed
    422 supposedly means the requested file doesn't exist, and sure enough if you look on the snort.org rules downloads page there is no file for version 29180. Source: over 2 years ago
  • Unable to Install OpenAppID on Ubuntu Server 18.04
    Where did you get the sourcecode you are building from? The snort3_extra-3.1.0.0.tar.gz package from the snort.org website doesn't have this stuff in appid_listener_event_handler.cc. Source: about 3 years ago
View more

tcpdump mentions (0)

We have not tracked any mentions of tcpdump yet. Tracking of tcpdump recommendations started around Mar 2021.

What are some alternatives?

When comparing snort and tcpdump, you can also consider the following products

Suricata - Suricata is a high performance Network IDS, IPS and Network Security Monitoring engine.

Wireshark - Wireshark is a network protocol analyzer for Unix and Windows. It lets you capture and interactively browse the traffic running on a computer network.

Imunify360 - Imunify360 is a comprehensive security suite for Linux web servers. It includes antivirus, firewall, WAF, PHP Security Layers, Patch Management, Domain reputation with easy UI and advanced automation.

netcat - Netcat is a featured networking utility which reads and writes data across network connections...

McAfee Network Security Platform - McAfee Network Security Platform guards all your network-connected devices from zero-day and other attacks, with a cost-effective network intrusion prevention system.

Ettercap - Ettercap is a suite for man in the middle attacks on LAN.