Hi all, Anyone knows why ICMP does not appear in conn.log ? I see that the plugin and icmp analyzer are loaded, yet no indication in conn.log for proto icmp. Thanks B -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170816/09b0751c/attachment.html