Joyent Interview Question

How do you implement SNORT,