Hello, Just a simple question, why do we've some files which start with t=<epoch_time> ("alarm/notice") and others with just <epoch_time> ("arp/conn") ? I ask this because i'm writing a little script and it'll be more easy to only have one format. :-) Best regards, Jean-philippe.