Hi Frank To solve another problem using fwsnort I had to exclude 2 signatures from emerging-all.rules
fwsnort --exclude-sid 2017291,2017025 Hope it helps. best regards -- Paulo Ricardo Bruck consultor tel 011 3596-4881/4882 011 98140-9184 (TIM) http://www.contatogs.com.br http://www.protejasuarede.com.br gpg AAA59989 at wwwkeys.us.pgp.net