[Unit] Description=Snort IDS system listening on '%I' [Service] Type=forking ExecStartPre=/sbin/ip link set up dev %i ExecStart=/usr/bin/snort -A fast -b -l /var/log/snort -D -p -u snort -g snort -c /etc/snort/snort.conf -i %i [Install] Alias=multi-user.target.wants/snort@eth0.service