On Sat, 2005-02-12 at 09:08, Jason Opperisano wrote: > tcpdump the external interface of the firewall for icmp type 3 code 4 > packets. left this part out--the command for that would be: tcpdump -n -nn -p -i $EXTIF \ 'icmp[icmptype] = icmp-unreach and icmp[icmpcode] = 4' -j -- "Mr. Simpson, why are you here? Don't say revenge! Don't say revenge! Revenge? That's it! I'm outta here!" --The Simpsons