Hi I can see that v2 has support for the data size in icmp records but this is not output in v1(.8) using ra -ncr - is there any data hidden away in the older argus record and an easy option to extract it? I am looking for specific sized icmp packets in old data..... 8-( Cheers Neil