On Jan 11, 2012, at 2:20 PM, Victor Julien wrote: > I would be interested to hear experiences on busy networks with these > rules enabled! How does this fare if you have packet loss during the session? .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro-ids.org/