r18916 - Might not handle The Source correctly, would need the portscan return message for that.