> or another idea: load heavy-analysis.bro for reducing *_timeout. heavy-analysis does the opposite - raises timeouts and increases resource consumption. (It won't affect memory consumption due to massive .* regular expressions either way.) Vern