diff --git a/docker/Dockerfile.cloud-agent b/docker/Dockerfile.cloud-agent
index 4f5156973e..7bcf8533db 100644
--- a/docker/Dockerfile.cloud-agent
+++ b/docker/Dockerfile.cloud-agent
@@ -7,4 +7,4 @@ RUN apk add --update bash conntrack-tools iproute2 util-linux curl && \
 ADD ./docker /usr/local/bin/
 ADD ./weave ./weaveutil /usr/bin/
 COPY ./scope /home/weave/
-ENTRYPOINT ["/home/weave/scope", "--mode=probe", "--probe-only", "--probe.docker=true"]
+ENTRYPOINT ["/home/weave/scope", "--mode=probe", "--no-app", "--probe.docker=true"]
diff --git a/prog/main.go b/prog/main.go
index 278a305b82..d361e8d70b 100644
--- a/prog/main.go
+++ b/prog/main.go
@@ -254,9 +254,9 @@ func main() {
 	// They are also here so they are included in usage, and the probe uses them to decide if to
 	// publish to localhost.
 	noApp := flag.Bool("no-app", false, "Don't run the app.")
-	probeOnly := flag.Bool("app-only", false, "Only run the app")
-	flag.Bool("probe-only", false, "Only run the probe.")
+	probeOnly := flag.Bool("probe-only", false, "Only run the app.")
 	flag.Bool("no-probe", false, "Don't run the probe.")
+	flag.Bool("app-only", false, "Only run the probe.")
 
 	// Probe flags
 	flag.StringVar(&flags.probe.token, serviceTokenFlag, "", "Token to use to authenticate with cloud.weave.works")