Hi again , 1°) This is a line of iptables log IN=ppp0 OUT= MAC= SRC=80.14.205.152 DST=80.15.220.67 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=64444 DF PROTO=TCP SPT=4717 DPT=135 WINDOW=16384 RES=0x00 SYN URGP=0 How to see what port have been attempted ? 2°) Is fwlogwatch a tool that will help me to make the logs more readable , or a tool that will tell me that something is attempting to @#$£ my network ? What i'm looking for is something like this : http://www.gege.org/iptables/ but i dont want to install SQL nor Apache /PHP . Does it exist ? I just want a kind of report of what has been DROPped but in a readable format ... Anyway , the logging format can be read , but it needs training , and i have no training . -- Rakotomandimby Mihamina Andrianifaharana Tel : +33 2 38 76 43 65 http://stko.dyndns.info/site_principal/Members/mihamina