O.K. "Mostly if not all from DSS" Here's where we disagree. Others here have well established the McAfee/ACS relationship. Either McAfee is infringing our IP to provide polymorphic threat (like keylogger) defense to the U.S. Government (which I doubt) or they are incrementally paying ACS to provide it. Which IMHO is the case. The bottom line is neither of us know for sure because the original source of payment was non-attributed in the Qs.