Low Orbit Flux Logo 2 D

Snort GUI

There is one question that people tend to ask once they start learning to use Snort. Is there a Snort GUI?

There are several different options if you want a GUI for Snort. Here is a quick table:

ACID Very old web interface
BASE Replacement for ACID, also old and abandoned, still good though, PHP based
Snorby Another web interface for Snort, also abandoned, uses Ruby on Rails
OSSIM From AlienVault, now owned by AT&T Cybersecurity
PLACID Phil Loathes ACID, text based interface to look at Snort events
SGUIL TCL GUI, heavy weight solution
Splunk Not specifically a Snort GUI but can be used as one
Grafana Not specifically a Snort GUI but can be used as one
Snowl I only recently discovered this. It doesn’t look free but I haven’t looked into it yet.


Snorby can still be found on Github here: https://github.com/Snorby/snorby

It looks like their original domain ( snorby.org ) is now owned by some hosting provider who is selling it for over $2000 (it is probably worth that or more). If you try to go to the site it will redirect you to one of server random, spammy domains that try to trick you to download junk software.