That would mean we have to intercept snort's url. It's easy to do but I am not sure if it's cool.