snort on debian

install snort

set up the promisc interface

disable ipv6/inet6 for this interfacectl.conf
add net.ipv6.conf.enp3s0.disable_ipv6 = 1 to sysctl.conf

config snort to listen for this interface