On Thu, Apr 28, 2016 at 20:18 +0200, you wrote: > Is it possible to create a new opaque type for Bro using a dynamic > plugin without touching Bro sources? Yes, it should. I believe if you implement the logic in your plugin's InitPreScript() method, it should work. Robin -- Robin Sommer * ICSI/LBNL * robin at icir.org * www.icir.org/robin