# to run: bro -r tracefile ex2b.bro weird alarm global conn_count = 0; event connection_established(c: connection) { local id = c$id; local log_msg = fmt("%.6f %.6f %s %s %d %d %d %d ", c$start_time, c$duration, id$orig_h, id$resp_h, id$orig_p, id$resp_p, c$orig$size, c$resp$size); print log_msg; ++conn_count; } event bro_done() { print fmt("Total number of connections: %d", conn_count); }