Do you have access to the firwall? If so I and many others will help you set up a syslog server to view raw data. If not you need to figure out how to do it in webtrends which I know dick about.