Reading _all_ packets

[Mike Muratet]

> 
> > for how to make bro report _everything_?
> 
> What exactly do you mean by "everything"? As you compare Bro to
> tcpdump it sounds like you would like to see every packet. That does
> not really fit into Bro's connection-oriented model. Do you know
> ipsumdump[1]? Perhaps that could be more appropiate here?
> 
Robin

It will be more appropriate.

Thanks

Mike