Snort attempts to use dnet.h, but in Debian the libdnet header is actually /usr/include/dumbnet.h and snort most likely will try to use -ldnet but it should use -ldumbnet in order to work under Debian. --Chris