There is also one thing i want to know about argus. Is there a possibility to get some result from flow data like, how many packages there are that has a spesified size of payload in the flow or how many packets have inter packet delays of the spesified seconds. Thanx > -- Oguz Yarimtepe http://www.loopbacking.info