This may not be exactly what you want to hear but if this box is going to be dedicated to running/experimenting/playing with snort, you'd be a whole lot better off to use a..ahem...less encumbered distribution. I heartily recommend Slackware 9.1, 10, or 10.1 for this purpose. -- Jonathan