config snort 'snort' option config_dir '/etc/snort/' option interface 'eth0'