On some of my older FreeBSD boxes, my IPFW deny log rules would generate logs that included the denied packet's len and flags when tcp, but I've noticed that my newer 8.2 box does not despite all the sysctl tunables looking the same. Is there something I'm missing here? Is this still possible? Thanks, \\korodev