hello, I managed to capture netflow data with a workaround: tcpdump -s 1500 -w - udp and port 9969 and dst host x.x.x.x | argus-3.0.7.1/bin/argus -w - -S cisco:- | \ argus-clients-3.0.7.1/bin/ra /Torbjörn W