and if you add it on snort make sure you tick the read and write boxes. at first I didn't do that and I didn't know why it wasn't working.