Here is one of the double listings I am getting in my Sygate Traffic log

5766 04/19/2004 22:00:47 Allowed 3 Incoming TCP 195.49.217.2 4A-69-20-00-01-00 20605 x.x.xxx.xxx 00-00-01-00-00-00 2794 C:\WINDOWS\System32\DRIVERS\ProtoWall.sys ---- ---- Normal 3 04/19/2004 21:59:34 04/19/2004 21:59:43 Ask all running apps
5767 04/19/2004 22:00:47 Blocked 15 Incoming TCP 195.49.217.2 4A-69-20-00-01-00 20605 xx.x.xxx.xxx 00-00-01-00-00-00 2794 ---- ---- Normal 3 04/19/2004 21:59:34 04/19/2004 21:59:43 Block_all

I am getting this double listing for everything. So I'm reading it that for every port scan I'm getting, 15 are blocked and 3 are allowed - which essentially means I am open to anybody. Ok, it's late, I've gone through sygate help files, I'm tired, my brain is mashed again. I don't feel safe with this damn program, so much more complicated than ZA.

Can someone enlighten me please?

The number 15 and 3 relate to the supposed severity of the attack and nothing more,
So don't worry you was not attacked more than what's shown.
There is some links that Moore posted a week or so ago that explain exactly how Sygate logs blocked packets
You should find it on here.
Failing that there's always G00gle

Um, ok. ??? Still don't get why it says allowed if they're blocked. For every one blocked, it was allowed also. Doesn't make sense to me. I did try searching on this site (I always do before I post), but couldn't find anything. Nevertheless, I'll search again, now that my brain is refreshed. I'll also do the google thing if I need to (I was just too far gone when I posted last night, had had enough).

Thanks for your reply GuruGuru

Yeah it can get braintaxing all this..
I have also reported that Protowall does let packets thru so the dev team are aware of the leaks.