> ... I could see that > the value of IPPROTO_ICMP defined in bro.init. But it looks like > the source files (eg. Discard.cc) are taking the value from the system file /usr/include/netinet/in.h. > > Is it supposed to work this way? or am I hitting on a bug? It's supposed to work that way. Vern