Evening all. I've found this entry in netstat output: tcp 57 1 Mizzou-AS7-21.mis:10802 pavlov.midco.net:ftp LAST_ACK Thing is, I don't remember connecting to pavlov.midco.net There are no entries in syslog with name pavlov, or xferlog, for that matter. Any ideas where else I can look if my system has been accessed by an outsider? Thanks, Andrew