Hello I`m using snort on potato but i dont know how to set the option for dynamic ipadress in /etc/snort/snort.conf DEBIAN_SNORT_STARTUP=dialup DEBIAN_SNORT_HOME_NET="ppp0_ADDRESS" DEBIAN_SNORT_OPTIONS="-p" DEBIAN_SNORT_STATS_RCPT="user" DEBIAN_SNORT_STATS_TRESHOLD="1" The snortlogfiles are always empty!! Also i dont know where to copy the rules ? Thanks Arne
_________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com