u snort 29 - /var/log/snort