> ... but if my quick skim is correct, this paper is where the old > load-level.bro script came from, right? Yes, basically. That paper documents a bunch of our experiences, including load-level. I think we wound up being torn between the need for it versus the notion "if you need it, what you really need is a bigger cluster". Vern