Hi, I wrote a blog post about one way to use flowint in suricata: http://www.gamelinux.org/?p=403 Hope this can be inspiring and I hope other will share their use too. -- Edward Bjarte Fjellskål Senior Security Analyst http://www.gamelinux.org/