Snort config file locations

First edit this file
$ sudo vi /etc/nsm/pulledpork/pulledpork.conf
Locate this line
Remove the last part “local.rules”Save and quit the text editor

$ sudo rule-update again.
Check your sguil again and you should see the alerts show up now.

sudo vi /etc/nsm/rules/local.rules
sudo vi /etc/nsm/rules/downloaded.rules 
sudo vi /etc/nsm/pulledpork/pulledpork.conf
sudo vi /etc/nsm/securityonion.conf
sudo rule-update

sudo dhclient -r
sudo dhclient enp0s3
sudo vi david-virtualbox-enp0s3/snort.conf