The xterm was running over an "ssh -X" connection: ssh -X -P -C -f $HOST "xterm -ls -n $HOST" The NIC is hooked to a gigabit switch but the machine I was connected to (for both the xterm and imap) is on a 100Mbit switch. The client machine is a Shuttle SN95G5. (V2.0 I think.) I'll do the wireshark trick next time I see this. Thanks, Dale -- Dale E. Martin - dale@the-martins.org http://the-martins.org/~dmartin