Hi everyone, I am using snort that comes with 7.1 and configuring snort to work with pppoe has been a major issue. (OK maybe I am not seeing what I have to do). I have triedwww.vulnerebilites.org to nmap my IP but snort is not capturing anything. Any help is appreciated rp-pppoe is running on my firewall PC and there is masquareding for my home lan I'm starting snort via rcsnort which is /usr/sbin/snort -D -i ppp0 -c /etc/snort/snort-lib and this is my snort-lib # SET THIS VARIABLE TO COVER YOUR OWN NETWORK RANGE!!!! ############################################################################### var HOME_NET 192.168.1.0/24 ############################################################################### # SET THIS VARIABLE TO COVER YOUR OWN EXTERNAL RANGE!!!! ############################################################################### var EXTERNAL_NET [$ppp0_ADDRESS] # set your DNS server IP (or whatever) so you don't show "portscans" from # that address ############################################################################### # SET THIS VARIABLE TO AS IT APPLIES TO YOUR NETWORK!!!! ############################################################################### var DNS_SERVER 192.168.1.2/32 $EXTERNAL_NET/32 -- Togan Muftuoglu