On Tue, Sep 25, 2001 at 12:42:47PM +0100, Brian Somers wrote: >You could try running ``tcpdump -i xl0 -e -l not ip'' to see if any >of your traffic is being replied to (and to ensure it goes out with >the dodgy header numbers). I have run tcpdump and attached is the output in libpcap format. If you care to take a look, I'd really appreciate it. tq... /john Live Free OR Die