[Unit] Description=Snort IDS system listening on '%I' After=syslog.target network.target [Service] EnvironmentFile=/etc/conf.d/snort Type=forking ExecStartPre=/sbin/ip link set up dev %i ExecStart=/usr/bin/snort ${SNORT_OPTIONS} -u ${USER} -g ${GROUP} -c ${SNORT_CONF} -i %i [Install] WantedBy=multi-user.target