We're currently using Plixer for Netflow and now we're considering Lancope, with a focus on anomaly detection. Looking for any experience/advice, pros/cons with either, in regards to anomaly detection. TIA ChiefWFB