[23.05.1-RELEASE][admin@pfSense.home.arpa]/usr/local/share/suricata/rules: grep -nr 2270000 *
dnp3-events.rules:3:# This SIDs fall in the 2270000+ range. See:
dnp3-events.rules:8: app-layer-event:dnp3.flooded; classtype:protocol-command-decode; sid:2270000; rev:2;)
/var/lib/suricata/rules
/var/lib/suricata/rules/suricata.rules
[23.05.1-RELEASE][admin@pfSense.home.arpa]/usr/local/share/suricata/rules: find / -name "*rules"