Hi Dave, > Any tips on how to debug/profile further would be greatly appreciated. using https://github.com/0xxon/bro-scripts/blob/master/conn-workers.bro and looking at the type etc. of connections that are handled by the worker might help. Jan