> Can somebody suggest how do I turn off the generation of this: > > 'WeirdActivity ** non_IPv4_packet' > > I am getting loads of those in my honeynet. This should do the trick: redef weird_action += { ["non_IPv4_packet"] = WEIRD_IGNORE }; - Vern