diff --git a/pkgs/applications/networking/ids/daq/default.nix b/pkgs/applications/networking/ids/daq/default.nix
new file mode 100644
index 00000000000..92175bb23e9
--- /dev/null
+++ b/pkgs/applications/networking/ids/daq/default.nix
@@ -0,0 +1,19 @@
+{stdenv, fetchurl, flex, bison, libpcap}:
+
+stdenv.mkDerivation rec {
+  name = "daq-2.0.0";
+  
+  src = fetchurl {
+    name = "${name}.tar.gz";
+    url = http://www.snort.org/downloads/2311;
+    sha256 = "0f0w5jfmx0n2sms4f2mfg984a27r7qh927vkd7fclvx9cbiwibzv";
+  };
+  
+  buildInputs = [ flex bison libpcap ];
+  
+  meta = {
+    description = "Data AcQuisition library (DAQ), for packet I/O";
+    homepage = http://www.snort.org;
+    license = "GPLv2";
+  };
+}
diff --git a/pkgs/applications/networking/ids/snort/default.nix b/pkgs/applications/networking/ids/snort/default.nix
new file mode 100644
index 00000000000..b674f3a83fb
--- /dev/null
+++ b/pkgs/applications/networking/ids/snort/default.nix
@@ -0,0 +1,19 @@
+{stdenv, fetchurl, libpcap, pcre, libdnet, daq, zlib, flex, bison}:
+
+stdenv.mkDerivation rec {
+  name = "snort-2.9.4.6";
+  
+  src = fetchurl {
+    name = "${name}.tar.gz";
+    url = http://www.snort.org/downloads/2320;
+    sha256 = "1g5kn36l67a5m95h2shqwqbbjb6rgl3sf1bciakal2l4n6857ang";
+  };
+  
+  buildInputs = [ libpcap pcre libdnet daq zlib flex bison ];
+  
+  meta = {
+    description = "Snort is an open source network intrusion prevention and detection system (IDS/IPS)";
+    homepage = http://www.snort.org;
+    license = "GPLv2";
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index ac9fed3d382..5a7b082863e 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -652,6 +652,8 @@ let
 
   dadadodo = builderDefsPackage (import ../tools/text/dadadodo) { };
 
+  daq = callPackage ../applications/networking/ids/daq { };
+
   dar = callPackage ../tools/archivers/dar { };
 
   davfs2 = callPackage ../tools/filesystems/davfs2 { };
@@ -1634,6 +1636,8 @@ let
 
   smbnetfs = callPackage ../tools/filesystems/smbnetfs {};
 
+  snort = callPackage ../applications/networking/ids/snort { };
+
   snx = callPackage_i686 ../tools/networking/snx {
     inherit (pkgsi686Linux) pam gcc33;
     inherit (pkgsi686Linux.xlibs) libX11;