tcpdump| grep my_ip | grep other_ip 16:48:46.048760 arp who-has other_ip tell my_ip 16:50:17.051995 my_ip.32814 > other_ip.ipp: S 3413594480:3413594480(0) win 5840 <mss 1460,sackOK,timestamp 266031 0,nop,wscale 0> (DF) netstat| grep gnumeric tcp 0 1 my_ip:32812 other_ip:631 SYN_SENT 500 16110 6139/gnumeric honestly, i don't have any clue how to interpret this.. is the port 631 specific for smth? gabriel