This is a multi-part message in MIME format. ------=_NextPart_000_0081_01C09085.39C2ED20 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Seems I'm a little concered -- This is what shows up in my = /var/log/secure file Apr 3 21:33:20 gizmo xinetd[568]: START: ftp pid=3D17050 = from=3D206.212.47.168 Apr 3 21:33:21 gizmo xinetd[17050]: USERID: ftp OTHER :root Does that mean, someone "attemped to ftp as userid root and failed... or = he attempted and suceeded?" I dont think you can FTP as root, but it = looks like he did.. =20 Cheers, Tyler Hall "Goddam it, you'll never get the Purple Heart hiding in a foxhole! = Follow me!"=20 - Captain Henry P. "Jim" Crowe (Guadalcanal, January 13, 1943)=20 ------=_NextPart_000_0081_01C09085.39C2ED20 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable