> from what I can see (ngrep) it looks like the content-lenght is 21 (if > you count the characters), but traversing my OpenSER it seems that one > character is removed (a dot?) and the content-lenght then > should be 20? A dot in ngrep is I think a "non printable" character like newline/linefeed (\r, \n). -- Andreas