On Wed, Apr 26, 2006 at 05:18:06PM -0700, Jesse Gordon wrote: > I sometimes see a port number like this in Tcpdump: > > 10.0.0.76.2049 > 64.x.x.5.796094310: reply ERR 394 > > 64.7.197.5.791752241 > 10.0.0.76.2049: 1460 proc-170106.. > > Ever seen anything like this? > > I'm a small natting ISP -- all of the above looks good except that port > number of 791752241.. That looks like some kind of issue with tcpdump or the underlying library. Have you looked at the same traffic with tethereal/ethereal? -- How can I miss you if you won't go away?