> This is _completely_ untested. It compiles. It will probably do > nothing else (well, besides crashing Bro). What algorithm do you use? Based on my own research, I found that we should use the Space-Saving algorithm that typically comes in the form of the Stream-Summary data structure. Matthias