I've put some thoughts together here: http://www.bro-ids.org/development/projects/comm-ng.html Still quite rough. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org