Parse Alert from snort to add rule to PF on OpenBSD