Hi, sometimes the field "service duration" in conn.log is void: why? Thanks -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150511/d0928d9a/attachment.html