I have a customer who has 3 Locations. The main locations have a VPN going to the other 2. He wants to be able to see his traffic usage between his VPN's and the Internet and the traffic for a secure site he goes to. I have been able to separate the VPN's in the queue by using the destination address and also the secure site because all that traffic goes through it's own ethernet interface on his routerboard. What I can't figure out how to do is monitor only the Internet traffic. It and his VPN's all go out the same Interfaces. Can somebody tell me how I can set up a queue that will ignore traffic to a certain IP or two.