[jimmo]

Thanks for the response. The reports I am looking at only cover the *internal* firewalls.

Perhaps I should phrase it a different way. Assume that all of the applications are configured correctly and are not trying to talk to machines they should not. In your experience, what percentage of drop can one expect from "unexplicable" things like corrupt packets? (granted packets shouldn't be corrupt)