I'm new to Snort and have joined a project where I need to analyze PCAP using snort.
I used docker to deploy Snort3.
Instead of the default rule set Talos, I used 265 rules I wrote by myself to analyze a PCAP file with about 700,000 packets. The picture below shows the detailed summary data.
I was wondering, is it normal that wait for about 10 minutes of Snort computing time?
In addition, if I want to speed up the computing time, how can I modify the command or configurations?
P.S. This is my first time asking a question, if the description of the problem is not clear enough, you can leave a comment and let me know. Thanks a lot!