you dont say if youve already looked, but here- http://www.eventid.net/display.asp?eventid=3D1006&eventno=3D1361&source=3DT= ermService&phase=3D1=20 link will probably get screwed up, but try eventid.net anyway - apparently = you can trace it with netmon - but they also say it could be a number of pe= ople all connecting at once Andrew --o-- >>> Malcolm.BRUTON@xxxxxxxx 27/05/04 09:57:35 >>> Has anyone come across a System event ID that says =20 The terminal server received large number of incomplete connections. The system may be under attack. Source is Termserver and event ID 1006. =20 Thanks Malcolm ***************************************************************************= ******** The Royal Bank of Scotland plc. Registered in Scotland No 90312. Regi= stered Office: 36 St Andrew Square, Edinburgh EH2 2YB. = =20 Authorised and regulated by the Financial Services Authority =20 =20 This e-mail message is confidential and for use by the = a ddressee only. If the message is received by anyone other =20 than the addressee, please return the message to the sender =20 by replying to it and then delete the message from your = c omputer. Internet e-mails are not necessarily secure. The =20 Royal Bank of Scotland plc does not accept responsibility for =20 changes made to this message after it was sent. = =20 = =20 Whilst all reasonable care has been taken to avoid the =20 transmission of viruses, it is the responsibility of the recipient to = =20 ensure that the onward transmission, opening or use of this =20 message and any attachments will not adversely affect its =20 systems or data. No responsibility is accepted by The Royal =20 Bank of Scotland plc in this regard and the recipient should carry =20 out such virus and other checks as it considers appropriate. =20 = Visit our websites at: = =20 http://www.rbs.co.uk/CBFM = =20 http://www.rbsmarkets.com = =20 = ***********************************************= ********************************* ******************************************************** This Week's Sponsor - Tarantella Secure Global Desktop Tarantella Secure Global Desktop Terminal Server Edition Free Terminal Service Edition software with 2 years maintenance. http://www.tarantella.com/ttba=20 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm=20 *********************************************************** For Archives, to Unsubscribe, Subscribe or=20 set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm=20 ******************************************************** This Week's Sponsor - Tarantella Secure Global Desktop Tarantella Secure Global Desktop Terminal Server Edition Free Terminal Service Edition software with 2 years maintenance. http://www.tarantella.com/ttba ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm