Hi Rob: Thanks for this Rob. I was coming round to the idea that they probably weren't malicious. They say a little knowledge is dangerous and watching the packets and connections using Interarchy is a bit off- putting if you don't know what's going on. Happy Christmas/Happy holidays to you all. regards, Chris > >217.12.3.11: I did a "whois 217.12.3.11" in Terminal, which showed >that IP to be owned by Yahoo Europe. > >224.0.0.251: Again, "whois 224.0.0.251" shows that IP to be owned by >IANA, the group that's responsible for all the "numbers" associated >with the internet (IP blocks, DNS, etc.). That specific IP claims to >be "reserved for special purposes," and to see RFC 3171 for >additional information. Looking that RFC up on the net (http:// >www.faqs.org/rfcs/rfc3171.html) shows that IP number is in a section >reserved for IPv4 Multicast, and more specifically, it's in use as a >"local network control block." > >Now most of that latter one is gibberish to me, too ... but in short, >I don't think either of those IPs are malcontents :).