
 message "${MESSAGE_COLOR} Before running ${SPELL} for the first time, modify the content of the:${DEFAULT_COLOR}"
 message " * /etc/sysconfig/snort	(at least - IFACES variable)"
 message " * /etc/snort/snort-xxx.conf	(where xxx = your interface)"
 message "	example: a) if IFACES="eth0 eth1" then, you must create in /etc/snort/ following files:"
 message "		snort-eth0.conf"
 message "		snort-eth1.conf"
 message "		( good start point is cp /etc/snort/snort/conf /etc/snort/snort-{eth0,eth1}.conf )"
 message "		 b) if you don't need different snort options for different ifaces :"
 message "		ln -s /etc/snort/snort.conf /etc/snort/snort-{eth0,eth1}.conf"
 message " "
 message " Warning: create log directory, for each IFACE from IFACES list"
 message "	example: if IFACES="eth0 eth1 wlan0" and LOG_DIR=/var/log/snort =>"
 message "		mkdir -p /var/log/snort/{eth0,eth1,wlan0}"
 message "		chown snort.snort /var/log/snort -R"
 message "		chmod o-rwx /var/log/snort -R"
 message " "
 message " PS: don't forget to update (from time to time) your snort rules (you can use 'oinkmaster' spell)"
 
