I installed snort with prelude support. That was a plan all along. I'll have a look about that prelude engine but i'm pretty sure its running, if you think of something let me know i'v been stuck with this for like three days now. Thanks for your help.