snort/doc/signatures
