> I haven't tried tcpdump, I'll try it tomorrow. My suspicion is that I You can also set up iptables logging rules to trace the package inside the linux box.