The default config seems to have output going to many files. Is this normal or will I be wanting to combine everything into one file for an analyzer program once I find one? Also, how would I do this, so that I can send all output to /var/log/netscreen for example. Mike