RE: simple pattern question

Robin,
  Thanks for the reply.
  I had tried that. Still no luck.
  By the way, I didn't mention that I included the policy script ntp.bro on the command line when invoking bro.
  Terry