> On Sep 28, 2016, at 1:50 PM, erik clark <philosnef at gmail.com> wrote: > > 98% of all entries in our files.log are null values. Is this to be expected? What analyzers are the files coming from? .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro.org/