/var/log/snort/alert {
	su root snort
	create 640 snort snort
	olddir /var/log/archive/snort
	postrotate
		/bin/killall -HUP snort
	endscript
}
