The MIS of one of our sister orgs. just called and has discovered that one of her (L)users has, (against company policy), installed Yahoo Messenger and been using it over port 80 to avoid the firewall block. She says that the logs are there but if she opens them they are all ascii characters.

Anyone tell me how to read the logs to determine if it is work related or not 'cos if it isn't the (L)user is getting her pink slips - if it is the (L)user is getting suspended...... either way, she's in the clag........