On Dec 6, 2011, at 11:58 AM, Matthias Vallentin wrote: >> $ bro yyyy.bro target_ip=1.2.3.4 > > Hah, I didn't know about that. Is that new with 2.x? Nope, it's been there for a long time. .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro-ids.org/