To capture portscans, try portsentry. It'll dump warning messages into your syslog, and other log files, everytime a portscan trips it. Andrei
------------------------------------------------------------------ First there was Explorer... Then came Expedition. This summer.... Coming to a street near you.. Ford Exterminator. ------------------------------------------------------------------ Andrei Ivanov http://arshes.dyndns.org [EMAIL PROTECTED] 12402354 ------------------------------------------------------------------