Can't you just do a tcpdump? Save it as an ascii file, etc. I know there are authentication issues at times with XP. I have heard it tries to communicate with some low port like 415 or the like, before it decides to talk to the server proper and all. Joel