Love the plugin thanks...quick question for cli...does af_packet need -i for multiple interfaces, or can it be used like snort with af_packet::eth0:eth1? Thank you. James