On Sat, Nov 11, 2006 at 12:15 -0600, Abhinay Kampasi wrote: > Right now my script has the tcp_packet(...) event handler. I am assuming > that this event handler will be invoked for all TCP packets. Is that right? Yes, that's right. Robin -- Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org LBNL/ICSI * Fax +1 (510) 666-2956 * www.icir.org