On May 9, 2012, at 1:16 PM, Tom OBrion wrote: > I loaded capture-loss and I assume you wanted some > date out of the notice.log about the packet drops? You will have a new log named capture_loss.log. Could we see some lines from that? .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro-ids.org/