I get a few hundred of this type of log entry each day:
NAT: WWW - Open tunnel TCP [aaa.bbb.ccc.ddd/80]<-[eee.fff.ggg.hhh/80]<-[iii.jjj.kkk.lll/50082] pkts=13:10 bytes=5357:797 Note, it's an "Open tunnel", but it also has packet and byte counts. How is this possible? I've only seen it happen with WWW traffic (both incoming and outoing), with versions 3.2.0 and 3.2.2. -- Alex Howansky Wankwood Associates http://www.wankwood.com/
