PREIN

/bin/sh

/usr/share/rpm-helper/add-user snort $1 snort /var/log/snort /bin/false

PREUN

/bin/sh

/usr/share/rpm-helper/del-service snort $1 snortd

POSTIN

/bin/sh

update-alternatives --install /usr/sbin/snort snort /usr/sbin/snort-plain 10
/usr/share/rpm-helper/add-service snort $1 snortd

POSTUN

/bin/sh

/usr/share/rpm-helper/del-user snort $1 snort 
# remove the link if not upgrade
if [ $1 = 0 ]; then
	update-alternatives --remove snort /usr/sbin/snort-plain
fi