add more snort action