I know that summaries are produced by the bro for each connection/event. By the manual these summaries or one-line statements of the form
B1 B2 A1 A2
is stored in a file called red.tag.
Does anyone know where can i find this file. i mean which directory does this summary file residing ?