Greetz. Just a matter of interest. Say there is user A, he dials up to ISP J. User A breaks into server X. Server X has the ip, he contacts the isp.... How is the user tracked from there on... Do servers like CiscoSecure ACS keep track of the ip and the time connected. The reason I am asking is in my little experience that I had with CiscoSecure ACS and their radius, I could not find such info on the logs. Is tacacs perhaps a little better, will it give me more info? Or will this user just get away with this -- Doubt it though.... Any help will be greatly appreciated. Ciao Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=11010&t=11010 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]