[brother@dtmb ~/work/policy]$ svn diff notice.bro Index: notice.bro =================================================================== --- notice.bro (revision 6442) +++ notice.bro (working copy) @@ -355,7 +355,7 @@ if ( action == NOTICE_DROP ) { - local drop = Drop::drop_address(n$src, ""); + local drop = Drop::drop_address(n$src, n$msg); local addl = drop?$sub ? fmt(" %s", drop$sub) : ""; n$dropped = [brother@dtmb ~/work/policy]$ svn diff drop.bro Index: drop.bro =================================================================== --- drop.bro (revision 6442) +++ drop.bro (working copy) @@ -153,7 +153,7 @@ $msg=fmt("%s%s", a, msg)]); else { - system(fmt("%s %s", Drop::drop_connectivity_script, a)); + system(fmt("%s %s \"%s\"", Drop::drop_connectivity_script, a, str_shell_escape(msg))); if ( di$tot_drop_count == 0 ) do_notice([$note=Drop::AddressDropped, $src=a,