config snort 'snort'
option config_dir '/etc/snort/'
option alert_module 'alert_syslog'
option interface 'eth0'