On Jan 13, 2009, at 11:51 AM, dikshie wrote: > #bro -r tcp6.pcap > > 1231818666.514747 weird: spontaneous_FIN > > there are no *.log files (conn.log, etc). Try running with the conn.bro script... #bro -rtcp6.pcap -f "ip6 or ip" conn .Seth --- Seth Hall Network Security - Office of the CIO The Ohio State University Phone: 614-292-9721