On May 4, 2007, at 5:49 AM, Russell McMahon wrote: > If anyone here can make a more useful comment > than that, please do. According to our propaganda, cisco has some equipment that detects traffic patterns typical of MalWare and will do things like shutting off that port of the switch. I don't enough about those product lines to tell how much is true and how much is hype, but it certainly seems like it ought to be possible to do something like that (without the "shut down" part) in a relatively small number of cycles in a network monitoring box or app. BillW -- http://www.piclist.com PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist