Hi, > If we are ever in the same place Jan - beers on me! > > Thanks. I am happy that I could help! :) I have a few other small improvements for the intel-framework, which I plan to commit. I will include the do_notice.bro once I open a pull request. Best regards, Jan