Just a quick blog today , assuming you have installed snort from source, how do you update it ?

Turns out it is quite simple.

First download the new version of snort to /usr/src

Then remove the old version :

cd snort_old_version
sudo make uninstall

Then cd into the new snort and ./configure && make && make install.

To update rules, copy the rules to /etc/snort/rules