Hi, I would also add that if you see partial packets you can try to remove any transport protocol (udp/tcp) and port filters. It will help if you are dealing with IP fragmentation. Otherwise sniffer won't catch IP fragments since they don't have transport level headers. Best Regards, Vitaliy