Hi Cool seems to do its job, can't make calls now ;o) What is the format of the fields in the table? Currently got: +--------------+-------+---------------+ | src_ip | proto | from_pattern | +--------------+-------+---------------+ | 196.47.3.231 | TCP | @196.30.7.111 | +--------------+-------+---------------+ Somehow I think this is VERY wrong???? Thanks Tony