Snort cheat-sheet
Action Command
Run Snort on pcap data sudo snort -c snort.conf -r file-name.pcap