Anyone know of any exploits on a port 445 to 1801 connection? Or is the legitimate use of the combination. Is it monitoring or is it an exploit I don't know about? Thanks, Jan Clairmont LDAP and Solaris Admin. Consultan