On September 08, 07:49 (+0200), Igor Genibel wrote: > > Prelude will actually use snort as a sensor... > You are wrong. > The only thing predule uses from snort is the ruleset. Actually, there also exists a patch for Snort (up to 2.0.1), developed by a Prelude team member, which makes Snort log through LibPrelude and thus, report to the Prelude Manager. That's "snort-prelude-reporting-patch" in http://www.prelude-ids.org/download/releases/ -- Thomas Seyrat