FYI, a revised version of the Bro paper, which appears in Computer Networks 31(23-24), Dec. 1999, is now available from: ftp://ftp.ee.lbl.gov/papers/bro-CN99.ps.gz It has a number of tweaks over the USENIX version, none major, but together totalling a medium-grade revision. Vern