---
name: "snort2dlf"
section: "1"
platform: "linux"
package: "lire"
version: "2.1.1-8"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/snort2dlf"
---

# snort2dlf(1)

convert Snort logs to firewall DLF

## NAME

snort2dlf - convert Snort logs to firewall DLF

## SYNOPSIS

**snort2dlf**

## DESCRIPTION

**snort2dlf** converts Snort logs into firewall DLF format. Input for this converter is the standard snort logfile.

## EXAMPLES

To process a log as produced by snort:

```
 $ snort2dlf < snort.log
```

snort2dlf will be rarely used on its own, but is more likely called by lr\_log2report:

```
 $ lr_log2report snort < snort.log
```

## SEE ALSO

The Snort project website at http://www.snort.org/ .

## AUTHOR

Torsten Fellhauer \<torsten@fellhauer-web.de\> .  Code based upon ipchains2dlf code by Francis J. Lacoste.

## VERSION

`$Id:` snort2dlf.in,v 1.7 2006/07/23 13:16:35 vanbaal Exp $

## COPYRIGHT

Copyright (C) 2003 Torsten Fellhauer

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with http://www.gnu.org/copyleft/gpl.html.