I have an IDS station sniffing an unnumbered interface and I want iftop = to monitor that interface, but it keeps refusing to do so because it = can't look up the address. Is there a way to use it the same way I do = with snort, tcpdump, etc? Thanks! --=20 James D. Wilson Sr. Network/Security Engineer "non sunt multiplicanda entia praeter necessitatem" William of Ockham (1285-1347/49)