diff --git a/security/snort3/Makefile b/security/snort3/Makefile
index 23bd683bc2d3..30d9f3bb9720 100644
--- a/security/snort3/Makefile
+++ b/security/snort3/Makefile
@@ -1,78 +1,78 @@
 PORTNAME=	snort
-DISTVERSION=	3.1.36.0
+DISTVERSION=	3.1.38.0
 PORTEPOCH=	1
 CATEGORIES=	security
 PKGNAMESUFFIX=	3
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Lightweight network intrusion detection system
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 LIB_DEPENDS=	libdaq.so:net/libdaq \
 		libdnet.so:net/libdnet \
 		libhwloc.so:devel/hwloc2 \
 		libpcap.so:net/libpcap \
 		libpcre.so:devel/pcre \
 		libuuid.so:misc/e2fsprogs-libuuid
 
 USES=		cmake compiler:c++14-lang cpe iconv localbase pathfix pkgconfig \
 		shebangfix ssl
 USE_GITHUB=	yes
 
 GH_ACCOUNT=	snort3
 GH_PROJECT=	snort3
 
 SHEBANG_FILES=	tools/appid_detector_builder.sh
 
 CMAKE_ARGS+=	-DFLEX_INCLUDE_DIR_HINT:PATH=${PREFIX}/include/flex
 
 CONFLICTS=	snort-2*
 
 OPTIONS_DEFINE=		ADDRESSSANITIZER DEBUG DOCS FLATBUFFERS HYPERSCAN \
 			LARGEPCAP PIE STATICDAQ THREADSANITIZER
 OPTIONS_DEFINE_amd64=	TSC
 OPTIONS_DEFAULT=	STATICDAQ
 OPTIONS_DEFAULT_amd64=	HYPERSCAN
 OPTIONS_SUB=		yes
 
 ADDRESSSANITIZER_DESC=	Enable address sanitizer
 FLATBUFFERS_DESC=	Enable flatbuffers support
 HYPERSCAN_DESC=		Enable high-performance regular expression lib
 LARGEPCAP_DESC=		Enable support for pcaps larger than 2 GB
 PIE_DESC=		Enable PIE (Broken)
 STATICDAQ_DESC=		Link static DAQ modules
 THREADSANITIZER_DESC=	Enable thread sanitizer
 TSC_DESC=		Use timestamp counter register clock (x86 only)
 
 ADDRESSSANITIZER_CMAKE_BOOL=	ENABLE_ADDRESS_SANITIZER
 DEBUG_CMAKE_BOOL=		ENABLE_COREFILES ENABLE_GDB
 DOCS_CMAKE_BOOL=		MAKE_HTML_DOC MAKE_PDF_DOC MAKE_TEXT_DOC
 FLATBUFFERS_LIB_DEPENDS=	flatc:devel/flatbuffers205 # until https://github.com/snort3/snort3/issues/250 is fixed
 HYPERSCAN_LIB_DEPENDS=		libhs.so:devel/hyperscan
 HYPERSCAN_PLIST_SUB=		HYPERSCAN=""
 HYPERSCAN_PLIST_SUB_OFF=	HYPERSCAN="@comment "
 LARGEPCAP_CMAKE_BOOL=		ENABLE_LARGE_PCAP
 PIE_CMAKE_BOOL=			ENABLE_PIE
 STATICDAQ_CMAKE_BOOL=		ENABLE_STATIC_DAQ
 THREADSANITIZER_CMAKE_BOOL=	ENABLE_THREAD_SANITIZER
 TSC_CMAKE_BOOL=			ENABLE_TSC_CLOCK
 
 .include <bsd.port.options.mk>
 
 .if ${ARCH:Mpowerpc64*}
 LIB_DEPENDS+=	libluajit-5.1.so:lang/luajit-openresty
 .else
 LIB_DEPENDS+=	libluajit-5.1.so:lang/luajit
 .endif
 
 .if ${OPSYS} == FreeBSD && ${OSVERSION} < 1300000
 BUILD_DEPENDS=	flex>0:textproc/flex
 .endif
 
 post-patch:
 	${REINPLACE_CMD} -e 's|_LIBDIR}/pkgconfig|_PREFIX}/libdata/pkgconfig|g' \
 		${WRKSRC}/cmake/create_pkg_config.cmake
 
 .include <bsd.port.mk>
diff --git a/security/snort3/distinfo b/security/snort3/distinfo
index 7a18b47ca673..c29c014e971c 100644
--- a/security/snort3/distinfo
+++ b/security/snort3/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1658149857
-SHA256 (snort3-snort3-3.1.36.0_GH0.tar.gz) = 49b68d9b3d86b114a962a73a123972aa1614803d99f817cf3175c0ca1c188427
-SIZE (snort3-snort3-3.1.36.0_GH0.tar.gz) = 3151742
+TIMESTAMP = 1659100495
+SHA256 (snort3-snort3-3.1.38.0_GH0.tar.gz) = 714e94221e64c5755bf143243974f5f5983d754562d02c043dbfa0a1a5c6efba
+SIZE (snort3-snort3-3.1.38.0_GH0.tar.gz) = 3152507