Hi, Three questions: * In the default SQL accounting schemas %S is used over the Event-Timestamp attribute included in the accounting packet. I guess this is because of the potential drift between NAS, and it makes correlation easier. Is this the real reason or is it just an omission ? * RFC 2869 Specifies the format of Event-Timestamp to be number of seconds since the Unix Epoch. Yet FR prints it as Event-Timestamp = "Apr 24 2008 20:06:52 BST". Is this FR's interpretation of the integer timestamp as a date string or is the NAS sending the timestamp as a string? * In accounting detail packets, a timestamp attribute is included. But I can't figure out how to access it as an attribute when the detail entries are read back into the server. Any ideas how to ? It would be better to use this in accounting queries than %S and there will be a delay between the packet arriving and the packet being inserted into the SQL db. Thanks, Arran -- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton EXT:01273 873900 | INT: 3900