On Sun, Feb 12, 2006 at 08:15:42PM +0200, Martins Dzelde wrote: > why is that for some connection I cannot see the port used (while for > other it show a spefic port: http or 59813) ? Usually this is ICMP traffic. To confirm this, use a filter of "not icmp" Paul