On Wed, Feb 07, 2007 at 13:42 +0100, Brian Scott wrote: > Do we need to activate this module at a certain place? Have you loaded ssh.bro? Robin -- Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org LBNL/ICSI * Fax +1 (510) 666-2956 * www.icir.org