Hi! How can I save pcap files of only the alerts generated rather than logging pcaps of all of the traffic passing through? All the best, Sina -- SiNA PGP: 0x0B47D56D