>> tcpdump -i eth# > > hmmm...ok, so maybe this: > > tcpdump -i eth0 | grep 217 or better yet: tcpdump -i eth0 | grep 217- (due to the way tcpdump shows IP addresses)