Hi Slawomir, I have the same problem this same conditions. But I have a cisco 1801 router. When I debug with tshark I receive this exemple of trace. Mi computer have ip 10.10.0.46 And I want to access to google 209.85.227.99 argos:~# tshark -i vlan40 Capturing on vlan40 0.000000 10.16.0.46 -> 209.85.227.99 TCP 58420 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=2 0.374417 Cisco_dd:a9:bc -> PVST+ STP Conf. Root = 32768/0/00:21:a0:dd:a9:be Cost = 0 Port = 0x8001 2.374388 Cisco_dd:a9:bc -> PVST+ STP Conf. Root = 32768/0/00:21:a0:dd:a9:be Cost = 0 Port = 0x8001 2.994121 10.16.0.46 -> 209.85.227.99 TCP 58420 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=2 4.374543 Cisco_dd:a9:bc -> PVST+ STP Conf. Root = 32768/0/00:21:a0:dd:a9:be Cost = 0 Port = 0x8001 5.624656 192.168.1.253 -> 192.168.1.254 WCCP 2.0 Here I am 5.625202 192.168.1.254 -> 192.168.1.253 WCCP 2.0 I see you 6.374832 Cisco_dd:a9:bc -> PVST+ STP Conf. Root = 32768/0/00:21:a0:dd:a9:be Cost = 0 Port = 0x8001 8.374358 Cisco_dd:a9:bc -> PVST+ STP Conf. Root = 32768/0/00:21:a0:dd:a9:be Cost = 0 Port = 0x8001 9.000198 10.16.0.46 -> 209.85.227.99 TCP 58420 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 10.374318 Cisco_dd:a9:bc -> PVST+ STP Conf. Root = 32768/0/00:21:a0:dd:a9:be Cost = 0 Port = 0x8001 10.624513 Dell_f1:01:07 -> Cisco_dd:a9:ba ARP Who has 192.168.1.254? Tell 192.168.1.253 10.624844 Cisco_dd:a9:ba -> Dell_f1:01:07 ARP 192.168.1.254 is at 00:21:a0:dd:a9:ba 12.374313 Cisco_dd:a9:bc -> PVST+ STP Conf. Root = 32768/0/00:21:a0:dd:a9:be Cost = 0 Port = 0x8001 14.374301 Cisco_dd:a9:bc -> PVST+ STP Conf. Root = 32768/0/00:21:a0:dd:a9:be Cost = 0 Port = 0x8001 Regards, Benoit. This message (and any associated files) is intended only for the use of the individual or entity to which it is addressed and may contain information that is confidential, subject to copyright or constitutes a trade secret. If you are not the intended recipient you are hereby notified that any dissemination, copying or distribution of this message, or files associated with this message, is strictly prohibited. If you have received this message in error, please notify us immediately by replying to the message and deleting it from your computer. Messages sent to and from us may be monitored. Internet communications cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Therefore, we do not accept responsibility for any errors or omissions that are present in this message, or any attachment, that have arisen as a result of e-mail transmission. If verification is required, please request a hard-copy version. Any views or opinions presented are solely those of the author and do not necessarily represent those of the company.