Hello, hopefully someone can just kind of point me in the right direction. Not sure where to even start looking I have just built a fedora 4 box. It has apache and tomcat running on it In the log file, every call to the tomcat application server is considered a probe so my logwatch is filled with all the ips that have talked to my tomcat server as a server that is trying to prob my box. I would assume it has something to do with setting something in /etc/logwatch/ my /etc/logwatch/conf/logwatch.conf is empty thanks Randy