>> Those open UDP ports are most probably connections for the syslog. >Or for DNS, NIS, or any one of a myriad of other similar services. >Lots of stuff leaves around open UDP these days. Like udp telnet, udp.term, and udp.deslogin :) I see udp as the big ugly flaw in peoples armour personally. Mark mark@netsys.com