The problem is that Bro was incorrectly processing an empty regular
expression (corresponding to the "skip_authentication" variable,
which was empty because you commented out its redefinition).
Here's a patch.
Vern
*** RE.cc.ORIG Sun Oct 24 22:55:24 1999
--- RE.cc Wed May 2 16:48:03 2001