OK. I've completed changing alert to drop It works well. Thank you!!! -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20130312/2dc91ef4/attachment-0002.html>