Thomas Dukes wrote:
# tcpdump -i eth1 -n ip host 65.188.xxx.xxx and not ether host 00:17:CB:4F:97:81 ...
OK, I think you lost me on that last part. I ran tcpdump -i eth1 -n ip host 65.188.0.1 and got:
no, no. I said...
# tcpdump -i eth0 -n ip host 65.188.xxx.xxx and not ether host xx:xx:xx:xx:xx:xx
thats all one line. the first xxx.xxx would be replaced with those fields from your IP address not the gateway, and the latter xx:xx:xx:xx:xx:xx would be replaced with the MAC address of your ISP's default router, as discovered via the other command I listed.
I guess this is just too complicated to do over email... I recommend you find someone local to you who is versed in network troubleshooting.