Snort + NIDS + SLES10 problem

[maged shaker <maged.shaker () valuesys net>]

Dear all 
I was installed SuSE Linux Enterprise Server 10 on HP pro370  , with one
Ethernet  then i configured snort-2.4.4-10.4 that are coming with SLES10
distribution with snort file under /etc/sysconfig/snort ,and insert the
interface in this file as the following :
SNORT_INTERFACE="eth0"
then  start the  snort daemon under /etc/init.d/snort , and it  start
successfully , so snort was started to act as "HIDS" Host Intrusion
detection system  , but the problem  with the next scenario  when enable
snort as "NIDS" Network Intrusion detection system 

SLES10 has two  network address , one configured with IP to allow
administrator to monitoring and view the "Base"  Basic Analysis and
Security Engine ,and the other interface is not configured  to use for
sniffing  the traffic and configured with snort , and it attached to
span port in the switch  but when insert the other network address
in /etc/sysconfig/snort  as the following :
SNORT_INTERFACE="eth1 "and start snort it failed when  start and tell me
in /var/log/message :
Parsing Rules file /etc/snort/snort.conf
Feb 10 05:59:42 linux1 snort[9023]: FATAL ERROR: Undefined variable
name: (/etc/snort/snort.conf:44): eth1_ADDRESS

please give me advice for this issue and how to solve it 

Thanks 
NSM-man

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users