title: Snort Rules configuration problems
body: <p>Hi I just installed Snort on debian and configure it as random implementation as i don't know why is it not running afterall, could you reviev my configuration of Snort.
  I run my snort by command (on Debian 10):</p>
  
  <pre><code>/usr/local/bin/snort -q -u snort -g snort -c /etc/snort/snort.conf -i wlp3s0
  </code></pre>
  
  <p>Started by wi-fi intel card - ip:</p>
  
  <blockquote>
    <p>192.168.0.17</p>
  </blockquote>
  
  <p>My snort.conf file changes:</p>
  
  <pre><code># Setup the network addresses you are protecting
  ipvar HOME_NET 192.168.0.17/24
  
  # Set up the external network addresses. Leave as "any" in most situations
  ipvar EXTERNAL_NET !$HOME_NET
  </code></pre>
  
  <p>I also include snort basic rules from community page, and random filters, but afterall in end process i've seen none...</p>
  
  <p>As I said I seen in my pcap file - it doesn't work:
  <a href="https://i.stack.imgur.com/cYg4e.png" rel="nofollow noreferrer">wireshark PCAP</a></p>