When I access the firewaLL log and highlight an entry and then click 'more info', I am taken to Smartdefense Advisor (http://fwalerts.zonealarm.com/fwanalyze.jsp?record ...etc.). When I click "Technical Info" on that page I get a list of information about the connection attempt. Invariably, the port numbers listed for the source ip address and the destination ip are different from the firewall log entries. This is very strange. I am wondering if this could mean that the firewall links have been hacked to supply the wrong information. I am using Zonealarm Free 11.0.00.504. I noticed the same strange behavior with my prior version (11.0.00.20) All the other information supplied on the SmartDefense page seems plausible. There are no proxies involved. Knowing Zonealarms accuracy I fear that the program has been tampered with though the program was updated and installed through the Zonealarm website. Is there an explanation or fix for this?