nick no attack cmds seen here. i have no visibility into nadj, which was a suspect into at least one of the attacks. -- ------------------------------------------------------------- jose nazario, ph.d. <jose at arbor.net> security researcher, office of the CTO, arbor networks v: (734) 821 1427 http://asert.arbornetworks.com/