I did not know you could search the history of this list until after I posted my first message. I think you guys have covered most of my questions, if not all. So the way I understand it now is: with streaming music and the 127.0.0.1, I am possibly recieving IP fragments, and/or delayed responce, and thats what could be triggering the port scan alert. That sound about right? I am still curious what you guys do when you recieve a port scan alert, if you just ignore them unless someting else points to an intrusion, or do you research them? If so, what tips do you have? Thanks! Paul