No they are not.
>is, is there ever a possibility that a start record for a port might PRECEED
>the stop record for that same port from the previous session?
Yes, not exceedingly great but certainly common enough to be seen many times.
You MUST expect to deal with out of sequence records AND duplicates.
-MZ
-- <URL:mailto:megazone@megazone.org> Gweep, author, webmaster, human being, me "A little nonsense now and then, is relished by the wisest men" 781-788-0130 <URL:mailto:megazone@gweep.net> <URL:http://www.megazone.org/> Hail Discordia! - To unsubscribe, email 'majordomo@livingston.com' with 'unsubscribe portmaster-radius' in the body of the message. Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>