One of the machines that I'm involved with had the following line in it's authlog: Apr 26 06:25:03 cain su[2536]: + ??? root-nobody ... and I can't figure out what the heck caused it. I haven't seen a line like it before. Any ideas what kind of event would have caused this line to be logged? all clues welcome. =) Brian fade@etc.etc.etc. "You can't depend on your judgement when your imagination is out of focus." -- Mark Twain