`tcpdump -vvvi tap0` Yep, I'll try that tonight. Gotta go now. You bridged tap0 to your external interface, right? No. In fact, that's the whole point - to keep HECnet traffic off of my real Ethernet. tap0 is connected to only two things - Johnny's bridge, and QNA-1 (xqb on simh). QNA-0 (xq on simh) is connected to my physical Ethernet. VMS sees both and, if necessary, routes DECnet across them. Bob