Yeah, I sometimes find when running on ginormous traces with limited disk space available for (what will be massive) logs that -b really helps.
Vern _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev