When i was processing traces downloaded from WAND, it was reported that "Unknown data link type 0x9". I am using Bro 2.0 Beta. If not, is there any solution? Readon Shaw -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20111211/9d2d8c44/attachment.html