Hey Folks, I know this question was presented at one time or another but I have yet to see any responses so I thought I'd try again and see if anyone can shed some light so to speak. I'm seeing packets come into syslog from various nas's (hiper arcs) with the following info: Dec 3 13:57:01 as2 --syslog capture: 14000602 slot:3/mod:7 --syslog capture:stop Dec 3 13:57:03 as2 --syslog capture: 0700020c slot:13/mod:3 --syslog capture:stop Dec 3 13:57:12 as2 --syslog capture: 14000602 slot:3/mod:7 --syslog capture:stop Dec 3 13:57:16 as1 --syslog capture: 58010a01 slot:2/mod:11 --syslog capture:stop The one thing I notice is that the majority of them are regarding particular interfaces per nas. Meaning I get these types of logs over and over again.....but usually regarding the same interface (i.e. slot:3/mod:7) in the example above. I don't believe it's necessarily pertaining to that inferface but to the user connected on that interface. I'll also see things like: Dec 3 13:59:24 as2 last message repeated 4 times which leads me to believe I'm getting a LOT of these logs. Can anyone shed some light on these logs? Also....is anyone doing any type of filtering for nachi/blaster and if so are you doing it on your next hop router or on the nas directly? Regards, Todd