Thanks sir...

That XML file..The IP listed... There are two TAGS..first IP and the other is Compare IP ..If you were doing a rule that was and IP SPAN ...ex: 202.34.34.00-202.34.34.255 ..How is this displayed? Would the IP tag be the first number and the compare be the second?? In HEX..

Thanks again..

I find that PHEX seems th be the most Flexible and powerful client out there for controlling what you want or need ....

A request would be able to dump all searches that stream by in the SEARCH monitor to a TEXT file or a log.. there is some neat stuff in there...

Thanks!