Snort Lab Rule Performance Analysis
config profile_rules: print [all | ], sort <sort_option> [, filename [append]] To enable rule profiling, we need to modify the Snort configuration file. On your Ubuntu Server VM, open a terminal shell and enter the following command: sudo gedit /etc/snort/snort.conf Once the file is open, either click on the magnifying glass icon or hit Ctrl+F to open the search window. Type in profile, then un-comment the “config profile_rules” line (see the image below)....