This thread has been somewhat active in the last few days. Thought I'd pass this link along, for those interested... http://isc.sans.org/diary.php?storyid=1391&isc=588ec48073fcd2e19ce9db0a9b303 4ba