> As a start use CheckIPHeader "DETAILS true" configuration setting and have a I should have posted that earlier. It spits out "ip: IP header check failed: bad IP length" In the packet I see, ip.len == 1498 Thanks,