PREIN

/bin/sh

/usr/share/rpm-helper/add-user snort $1 snort /var/log/snort /bin/false

PREUN

/bin/sh

/usr/share/rpm-helper/del-service snort $1 snortd

POSTIN

/bin/sh

ln -sf /usr/sbin/snort-plain /usr/sbin/snort
/usr/share/rpm-helper/add-service snort $1 snortd

POSTUN

/bin/sh

/usr/share/rpm-helper/del-user snort $1 snort 
# remove the link if not upgrade
if [ $1 = 0 ]; then
	rm -rf /usr/sbin/snort
fi