That would be the user agent making the request most likely Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://blogs.isaserver.org/shinder/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- Microsoft Firewalls (ISA) ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Michael Ross Sent: Wednesday, March 21, 2007 1:51 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] log file i was testing out the msdetotxt script, and i found this in my log files. has anyone else seen this?? downstreamISA anonymous WhatsUp Professional/1.0 0 3/21/2007 3:54:20 1 isagateway x.x.x.x x.x.x.x0 80 60032 153 405 http TCP HEAD http://x.x.x.x/ - 0 0x2FB1 0x0 - Compression:None - - 0x80 8