On May 15, 2013, at 1:22 PM, Michael Cox <mscox42 at gmail.com> wrote: > Anyone feeding Bro logs to ArcSight? If so, could you ping me back, please? We can take it off-list. Sounds worthwhile, please keep it on list! .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro.org/