Gordon Messmer wrote: > Florin Andrei wrote: >> >> If you were running tcpdump in promiscuous mode, re-run the tests with >> it non-promiscuous. Just to make sure the SYN is actually received by >> that system. > > I ran the test again with "tcpdump -i eth0 -p" and then thinking better > of it, with "tcpdump -i any". In both cases I was able to replicate the > problem. Even with "-i any" I see the incoming SYN packets and no > SYN+ACK reply. And you do capture *all* traffic, right? Don't filter out anything. -- Florin Andrei http://florin.myip.org/