> Any way to insert any connection related details > inside event bro_init() bro_init is called before any traffic processing occurs; because of that, there are no connection details available yet. If you mean something else, I sadly didn't get the question :) Johanna