http://www.ntop.org/products/deep-packet-inspection/ndpi/ just came on my radar. Do folks already know about it? Has anyone assessed what they've put together and whether any of it is leverageable for Bro in a useful way? Vern