On Tue, Feb 27, 2007 at 16:25 +0530, Bindiya V S wrote: > captured pcaps. We have some FTP pcaps that are not having any > TCP handshake packets. Can you send me one such connection as a pcap trace? Robin -- Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org LBNL/ICSI * Fax +1 (510) 666-2956 * www.icir.org