> The 65xx/76xx platform only does sampled netflow > if i recall correctly. No. By default you get full flows. We used this at my previous employer. Steinar Haug, Nethelp consulting, sthaug at nethelp.no