$ 0 0 Dave, what a drop-packet-capture "host ip" will produce? Otherwise use a tcpdump to see what is happening on the connection for that ip/port.