Hi I have recently finished my master thesis called "Using Netflows for slow portscan detection". In the thesis I used a Netflow analysis system based on Argus as well as other open source tools. I hope that this will be of interest to people here. The thesis can be found at: http://www.malmedal.net/Malmedal_Master_Thesis.pdf Best regards, Bjarte