Hi, > 3. syslog > Well, this looks most stupid and probably is. if you want dumbish but fast and simple, syslogNG - dumps the DHCP messages into a database which can then be queried for certain fields (such as switch and port id..and date ranges etc etc) alan