snort -c /usr/local/etc/snort/snort.lua –warn-all -i ens18 -A alert_unixsock -s 65535 -k none -l /usr/local/var/lib/trisul-probe/domain0/probe0/context0/run -u trisul -g trisul -D