[expert] snort and mandrake

[.]

Has anyone successfully used the $<intf>_address in /etc/snort/snort.conf. I get a fatal error when I try to assign HOME_NET to it. I'm using the mdk 9.0 rpms, perhaps I need to recompile from source? What's the exact syntax? if eth0 is the interface, would it be $eth0_address, $eth0_ADDRESS, or something else?

Thanks,

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com