>> $ bro yyyy.bro target_ip=1.2.3.4 > > Hah, I didn't know about that. Is that new with 2.x? Shouldn't be, I remember seeing a chunk of code in the lexer when I first had to hack on it that adds "redef" statements for any X=Y command line parameters. +Jon