> Here is a trivial patch providing the current bro release for a Rsh > analyser. > It used to allow the detection of funny behaviors like local/remote > username mismatch, interactive shell in rsh, etc. Thanks!, I've integrated this and will include it in either the next release (out quite soon) or the one after. Vern