Snort rules for Suricata-IDS

Hello,
Is it possible to use Snort rules file for Suricata-IDS?

Thank you.

It depends on what version of snort you are loading.

If you load 2.9.x Snort rules into Suricata, some rules will work, but will not run as well as rules that have been written specifically for Suricata. Snort rules that use the Shared Object features will not work in Suricata. Rules written specifically for Snort 3 will not work.

ET/ETPRO rules support both Suricata and Snort rule engines, so if using those, just make sure you are using the right rule file.

2 Likes