I enhanced capconvert so that it can convert Sun snoop format (RFC 1761) dumps as well as tcpdump if anybody is interested. Doug Hughes Engineering Network Services doug at eng.auburn.edu Auburn University