Scott wrote, >Bummer, there's no way to get just a tcpdump binary that will work with >RHEL4 kernel? >Scott I think that net/core/dev.c is part of the core kernel and not a loadable module. Also, not sure if tcpdump can be modified to work with the kernel that has the overflow check. woody