Thanks for all the hints and help guys. I have a question about parallelism. If I am consuming live traffic on a 10G intel nic with 8 queues in it on my manager node, can I setup bro to send data to 8 separate workers such that, queue:1 traffic goes to a worker:1 and so on...? Is that possible? Or I am thinking it wrong? Cheers, Hiren