Hi every one I am trying to add TTL field to conn.log but can not seem to get TTL there is TTL in the base/event.bif I can not get it to work. could anyone help me out Thank you -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130603/821a7357/attachment.html