On Tue, Aug 07, 2001 at 08:18:47AM +1200, Philip Beckmann wrote: you're not alone. we've had to put access-lists in place to restrict port 80 traffic to valid machines in order to reduce router cpu utilisation load caused by large volumes of small packets (bogus queries) Actually, bogus queries aren't that small, almost 4k (3818 bytes in the dumps I have) which is probably large than what most web-servers get on average. Not only that, they are such that they look like: GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX ... Content-length: 3379 ^M ^M <binary payload> which probably causes additional cycles to be burnt as web-servers don't generlly see requests like that. --cw --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog