Hi, team. We're not seeing a lot of the UDP 123 <-> UDP 179 traffic. Here are the counts for the past few days. 20080120 583 20080121 657 20080122 620 20080123 457 20080124 637 20080125 367 20080126 294 Thanks, Rob. -- Rob Thomas Team Cymru http://www.cymru.com/ ASSERT(coffee != empty);