On Wed, Jan 16, 2008 at 21:08 +0530, Abin Moozhiyil wrote: > i tried with export BROPATH=/usr/local/bro and still the problem exists. BROPATH needs to point to the directory containing the policies, i.e., /usr/local/bro/policy. Robin -- Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org