I tried to install snare on Red Hat 9. I patched the kernel as required and everything appeared to go well. II installed it into grub and tried to boot it. The system boots fine. The last item installed is snare. After the system is fully up I looked for /proc/snare and it is not there, although /proc/audit and /prod/auditinfo are. An examintation of the messages notes that both /usr/sbin/auditd and snare have started. No other information is given. The system is a Dell XPS multiprocessor system with 3.+ GH processors and SATA drives which are set in combination mode in the bios. The is required because otherwise redhat cannot find the drives. Can anyone give me some guidance.... As always, all help is appreciated. Thanks, Dave Kirkwood - : send the line "unsubscribe linux-admin" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html