[FC3] SNORT: writing rules