Here are some basic munin plugins for snort using perfmon (Enable preprocessor perfmonitor in
The snort.conf entry should look something like:
preprocessor perfmonitor: time 300 file /your/path/to/snort.stats pktcnt 5000
(Read the snort docs for more info on performance issues etc.)
Edit any one of them, to graph what you want from perfmon output. It should be easy!
And now I will test them myself!
Here is a picture to give you an idea on how the graphs looks: