> One thought - the tcpdump is incomplete by just looking at port 80 you > can't see what ICMP are being sent. Well, the idea was to reduce the amount of data reported by tcpdump. My naive assumption was that running the two tcpdump's on eth0 and ppp0, I would see the request packet coming from eth0, the masqueraded one on ppp0, and the same process in the opposite direction for the reply. Why do you think it would be important to see the icmp's, too? Cheers, Albrecht. Machen Sie aus 14 Cent spielend bis zu 100 Euro! Die neue Gaming-Area von Arcor - über 50 Onlinespiele im Angebot. http://www.arcor.de/rd/emf-gaming-1
