$ 0 0 Thanks once again. Yes it is a TCP socket. In that case I think I'm out of options, other than sniffing with libpcap right?