Greetings. I wish to get opinions on my current setup. First some history: I have tried probably every firewall that one can find, including using the likes of filehippo or wayback to get ones that are hard to find now. I have used many of the newer hips applications as well. I have tried all of the free AV apps for many years now, as well as many trial versions of some of the commercial ones. I have tried every browser (which if you don't include IE skins, is not many) I can find. I have tried many different packet sniffers and other network related tools. I run xp pro, slipstreamed RyanVM updates, Bashrats driverpacks and many custom tools and regtweaks to neuter xp into something benign. I live behind a router on a static ip dsl style. I have mulitple bootable drives and a network to store critical data on. I have used proxomitron for a very long time. I am not afraid to reformat, and in fact enjoy it quite a lot due to my unattended dvd. I refuse to use ghost images now. I consider my system to be complex to use for the average key pounder, yet for me it is sleek and streamlined. I have never had a virii, never had spyware/malware that I did not invite in my being stupid. I use sandboxie when needed, or if needed vmware. Outpost firewall v1.0 is my fw of choice. v1.0 Pro is better somewhat, but basically same beast. v1.0 is not compatible with my intel mobo/cpu combo, so I use v2.0 on that. Somewhat more bloat in there, but still managable. I use Opera or Kmeleon for browsers. I use AntiVir for AV. I am wishing to slim down even more. So, this is my current thought: Outpost v2 but not autostarting, only manual start when desired. AntiVir.. Threatfire (played with since it was called Cyberhawk) Opera/Kmeleon/Proxomitron And that is it. No firewall at all really. In fact the only reason I even want one is for DNS logging. Many times I want to know what an app/game is doing or going to. The reason I love Outpost so much is that it has a really nice DNS cache thing with it. It is really nice to be able to set it to rules wizard, then start app in question, and easily see what it does. I have tried others that do name resolving, but they are either flaky (more so than OP) or just aren't up to snuff. As for AV, it is lean and does well on tests. And I don't have to see the ad anymore. Threatfire. I have a paid for ProcessGuard. I have tried others. I frankly don't care for all the work involved anymore. I would just a soon reformat. TF seems to catch all the nasties that I try to open. Oh yeah, when I fix peeps zombie computers I have a usb stick that I try to capture them onto. Tis great for testing out products. And browser, well, anything but IE works well enough. Opera has had me addicted since dialup @ 52,000. Then it was the 'Fastest Browser on Earth'. So, experienced users, what say you? For anything and everything utilizing the nic and going outside, what is your opinion? Bear in mind that any site that 'might' be nefarious will be used with sandboxie, I am not stupid, just tired of the complications that I don't feel are really needed for users who know what is going on. And now the real reason for this post. What I want, and cannot find, is a tool that monitors network traffic, perhaps in the same way that AppDefend does, and asks if it ok or not. Yeah, a firewall does that. But I just want to know about it. Or maybe just to have it logged. And, on top of that, I want to know where it was trying to go. I want the ip address and the resolved name if possible. Ports, protocols, directions etc would be ok to have in a log file, but really I just want to say 'yes or no', or just to be shown 'hey dude, some application went outside', with the associated data. Flushing dns cache or piping the cache to text files works ok. Host files work ok to stop a lot of stuff if you know about it. Anyone know of a tool for that? No bloatware. No 'suite'. I hate these new programs that do everything for you. I don't care if I do have 4gb of ram and multiple cores, I just don't want it. I want my process list to be lean and mean. Anyway, cheers to all. Hope someone as picky as myself can relate with some experienced information. Sul.