MaizeHello Sorry I confuse all you guy Let say In Window xx You Put a command NETSTATS It will OUTPUT some thing like this Active Connections Proto Local Address Foreign Address State TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4227 = TIME_WAIT TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4228 = TIME_WAIT TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4229 = TIME_WAIT TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4230 = TIME_WAIT TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4231 = TIME_WAIT TCP cx541749-a:ftp-data c1771000-a.stcla1.sfba.home.com:2815 = ESTABLISHE D TCP cx541749-a:ftp bb-62-5-49-77.bb.tninet.se:4226 = ESTABLISHED TCP cx541749-a:ftp c1771000-a.stcla1.sfba.home.com:2810 = ESTABLISHE D TCP cx541749-a:ftp h230n3fls21o906.telia.com:65002 = ESTABLISHED I would like to know !!!!!!1 is it possible i can do the same on router = ?????? If yes What command !! Thanks If no What the most closest command :-) Thanks IF some hacker log in to your rotuer and network ( he delete history and = log) How can you know your network hacked=20 Thanks [GroupStudy.com removed an attachment of type image/gif which had a name of amaizrul.gif] [GroupStudy.com removed an attachment of type image/jpeg which had a name of Maize Bkgrd.jpg] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=17593&t=17593 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]