hi, I was able to correctly filter out icmp messages. During some connections I I was not able to capture the icmp messages. I'm guessing at the beginning of a ping session the first few icmp echo packets were not being generated by the destination, and rather by the machines between the subnets. Bita.