Robin writes: > That sounds like Bro is running out of memory. What's the process' > size just before it crashes and how much memory does the machine > have? Note, you can track resource consumption over time by loading either stats.bro (lightweight) or profiling.bro (more info but larger performance hit). Vern