Take the time the event log entry was made and find that same time in the IP...log (allowing for GMT). The "BLOCKED" packet is the one ISA was talking about. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: <unitemp_edv@xxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, February 14, 2002 04:32 Subject: [isalist] ISA alert http://www.ISAserver.org Hello, I've the followin alert many times per day : The packet filter is dropping Internet Protocol (IP) packets Nowhere I cand find an exact description of that problem, so what is exactly the meaning of that ? Thank you Arnaud ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')