There is one question that people tend to ask once they start learning to use Snort. Is there a Snort GUI?
There are several different options if you want a GUI for Snort. Here is a quick table:
|ACID||Very old web interface|
|BASE||Replacement for ACID, also old and abandoned, still good though, PHP based|
|Snorby||Another web interface for Snort, also abandoned, uses Ruby on Rails|
|OSSIM||From AlienVault, now owned by AT&T Cybersecurity|
|PLACID||Phil Loathes ACID, text based interface to look at Snort events|
|SGUIL||TCL GUI, heavy weight solution|
|Splunk||Not specifically a Snort GUI but can be used as one|
|Grafana||Not specifically a Snort GUI but can be used as one|
|Snowl||I only recently discovered this. It doesn’t look free but I haven’t looked into it yet.|
Snorby can still be found on Github here: https://github.com/Snorby/snorby
It looks like their original domain ( snorby.org ) is now owned by some hosting provider who is selling it for over $2000 (it is probably worth that or more). If you try to go to the site it will redirect you to one of server random, spammy domains that try to trick you to download junk software.