cd logs
bro --pseudo-realtime=20 ex5b slave5b weird alarm

cd logs2
bro -r ../trace1.tcpdump --pseudo-realtime=20 ex5b master5b weird alarm