Hello, I saw a post showing the netmask() function for filters. I'm trying to do a filter such as: filter f_company { host("company-firewall") or host("company-ids") or netmask("10.128.53.0/24") or netmask("10.128.54.0/24") or netmask("10.128.55.0/24") or netmask("10.128.56.0/24") or netmask("10.128.57.0/24") or netmask("10.128.58.0/24");}; This doesn't seem to work. What am I doing wrong? I'm using the netmasks because the server can't get DNS for those hosts (internal Windows 2000 hosts using EvntSLog). Thanks, ~rick shank