On Thu, 2009-10-08 at 11:32 -0400, James Martin wrote: > Here's the tcpdump of the official cisco anyconnect client performing > a successful authentication: A tcpdump of an encrypted connection isn't so useful. You'll want to show the _content_ of the SSL connection somehow. Someone posted details of how to do that on this list a few weeks ago, I think. -- dwmw2