the most common form of IDS is signature based. Within these signatures, rules are used to help guide the IDS in processing network traffic. As an open source IDS, Snort depends on these rules or instructions to be functional. review the video below regarding how to write Snort rules and should develop a rule (can be typed in plain text in the discussion) that they think would be pertinent to an IDS. Then discuss dissect the rule and discuss what it is doing.

Additional Links to use to answer question:

https://www.snort.org/rules_explanation

https://www.oreilly.com/ideas