binds+=( '/etc/snort' )
binds+=( '/var/log/snort' )