>>>>> "Mel" == Mel Riser <mel.riser at fxfn.com> writes: Mel> I am seeing this error on WIN2K KDC in my lab. I traced the Mel> IP's back to a hacker group in Taiwan and they are trying a Mel> buffer overflow to change usernames and break in. If you can get a packet capture of this request it would be interesting.