Hi All, Quick new dumb question, When setting the variable ARGUS_OUTPUT_FILE in argus.conf how do you use "filter: IE is it asking for a file, or do you use the tcpdump expression options right on that line in quotes. Nothing seems to be working so I can make seperate output files with differant expressions. Thanks jterminiello at mediaone.net