Variables may be defined in Snort. These are simple substitution variables set with the var keyword as shown in Figure .