Curious to see how many saw the worm 2002 traffic change to UDP port 4156 at about 5PM Sat. -- sig=$header