They're not causing me any issues but is it expected that the IP address is reversed in these messages? Apr 9 06:27:48 ... IN=isp OUT= MAC=... SRC=1.0.168.192 DST=224.0.0.1 ... PROTO=ICMP TYPE=9 CODE=0 These are coming from my ISPs router - there's no obvious way to turn them off (or to change router or ISP) Tim.