That directory gets created in bro_init(), can we change that so that it happens only when something's actually extracted into it? Robin -- Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org/robin