just a quick note to say thanks to those who have responded, off list and on. i've got some useful stuff, but haven't had time to sort through and reply to everything. i'll likely be putting up a web site on "safe" ways to configure logging on various types of routers so that you can trap the data needed for AUP/TOS enforcement against proxy hijackers and other network abusers w/o accidentally bringing down your network. richard -- Richard Welty rwelty@averillpark.net Averill Park Networking 518-573-7592 Java, PHP, PostgreSQL, Unix, Linux, IP Network Engineering, Security