I've got a Windows 2000 computer and a Windows XP computer (both of which are running CHX), as well as a Windows 98 computer on my home network. Over the last week the CHX log on the XP computer has been showing quite a few instances of ICMP packets (type:10 code:0) from the 98 computer to IP address 220.127.116.11 (with destination MAC set to 01:00:5E:00:00:02). They are always sent in groups of 6 (3 pairs at a time, and each pair is sent 3 seconds apart). The really strange thing is that I have the same CHX rules on my 2000 and XP computers, but the CHX log on the 2000 computer doesn't show these packets. Only the XP log is showing them. Is CHX on my 2000 computer allowing them to come in? And why is the 98 computer all of a sudden sending them (it never did this before last week)? Also, the CHX logs are showing that sometimes the 2000 and XP computers send packets from seemingly random ports to 255.255.255.255 port 67. It's anywhere from 1 to 3 packets at the exact same time, and the source ports are close together -- like 1597, 1598, 1599... or 1835, 1836, 1837... or 1094, 1096. Are these DHCP packets (since they are being sent to port 67)? But then why aren't they coming from port 68 instead of these random ports?