Hi, Thanks for the quick replies! Within vlan.bro, will I need to define the vlans and their tags? I see: redef restrict_filters += { ["vlan"] = "vlan" }; Do I list a vlan name within the ["vlan"] and some tag information within the other "vlan"? Is the second part an actual tag or subnet/mask data? Thanks again! Jon Ruggieri