I think it would make sense to let the user configure the *type*, too. Each *type* should correspond to a specific type of information, so putting "percent of dropped packets" with "mbits per second" in the same *snort* type is not ideal.