The solution to Michael's problem is called wrappers. This is where source/destination/port are separately monitored and logged. Abientot! Karen [Quoted Message Deleted]