Snort has three operating modes:
Packet Sniffer – Reads packets from the network and displays them in the Snort console
Packet Logger – Reads packets from the network and writes them to a file
NIDS – Network intrusion detection system that applies rules to scan through packets