On Thu, 2003-10-09 at 08:09, Allison MacFarlan wrote: > If the traffic is going to hosts that are not your dns servers, it may > be Delude/Qhost traffic. We've seen at least 137 of them here. That was my first thought. We have eliminated that. Thanks anyway :) -- Russell Fulton, Network Security Officer, The University of Auckland, New Zealand.