The relay functionality of snort is it weakest point. For me it is not loading my really list and it is also doing this random behavior that you mention. Other than that is getting better and better