Snort can operate in three different modes namely tap (passive), inline, and inline-test. Snort policies can be configured in these three modes too.
