On Sun, Oct 19, 2008 at 06:36 -0700, hasssan ibra wrote: > I'm trying to use the connection log file ONLY, Is there any way to run Bro as just a capture and connection recorder?? Try loading only the "tcp" script. Robin -- Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org