In message <199607031547.LAA28220@jekyll.piermont.com>, "Perry E. Metzger" writ es: >(Don't forget that a socket is a 4-tuple >[port-1, host-addr-1, port-2, host-addr-2] >and not a one sided thing.) Ah yes, I forgot about the source port as a possible source of information. Don't know where I got the other idea. Thanks.