Hi, I have a collected tcpdump data and am able to convert it to arg3 flow data via racluster. But i want to get the spesific flows from this arg3, like ftp-data, http or ssh flows. Is it possible with rasplti or how can i do it? Will be happy if someone shows a simple example. Thanx. -- Oguz Yarimtepe http://www.loopbacking.info