On Sat, May 21, 2005 at 07:35:40AM -0500, EA wrote: > root at phobos root]# tethereal -i 3 -z smb,rtt,ip.addr==192.168.1.6 -f tcp port 137 or tcp port 137 or port 138 or tcp port 139 or tcp port 445 -s 2000 > Capturing on eth1 Completely useless without the raw packet data I'm afraid. Text files are not network traces ! Jeremy.