Hi, Given a trace with all traffic, is it possible to use Bro to produce a trace with just the HTTP traffic? Any hints would be appreciated. Thanks and best regards, Archit