ps: for the use of regexes check http://www.bro-ids.org/Bro-reference-manual/Patterns.html Cheers, Christian. -- ________________________________________________________________________ http://www.cl.cam.ac.uk/~cpk25 http://www.whoop.org