On Mon, Nov 06, 2006 at 00:17 +0800, you wrote: > first_packet_seen |= ORIG; > first_packet_seen |= RESP; That's right. Thanks a lot for catching this! Robin -- Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org LBNL/ICSI * Fax +1 (510) 666-2956 * www.icir.org