Thanks. I've found the BroControl scripts to modify the logger setup and will be testing soon. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170105/6e5fb491/attachment.html