Hi, I was experimenting on BRO 1.2 version. I could see that the value of IPPROTO_ICMP defined in bro.init. But it looks like the source files (eg. Discard.cc) are taking the value from the system file /usr/include/netinet/in.h. Is it supposed to work this way? or am I hitting on a bug? Regards, Bindiya