I have a
pcap file, and what I wanted to know is how can I apply the
Snortrule below which I've already written within the rules folder in my log folder:
alert icmp any any -> any any (msg:"TCP Packet"; sid:477; rev:3;)
How can I execute this rule over the pcap file I have?