Hi, Possible/How disable service name in this file ? Change : 1094411512.196834 WeirdActivity 193.250.83.215/49649 > 62.23.34.172/http: RST_with_data to : 1094411512.196834 WeirdActivity 193.250.83.215/49649 > 62.23.34.172/80: RST_with_data use bro 09a3 Regards Rmkml at Wanadoo.fr