> identifier Weird::WeirdActivity, at or near "Weird::WeirdActivity" You're then presumably using an older version of Bro that doesn't use scoping for weird.bro. Try dropping "Weird::". Vern