Wade Richards <wade@wabyn.net> writes: > Notice the "PROTO=UDP" part of the message. It means that this > is a UDP packet, not a TCP packet. UDP is not a socket-based > protocol, so the port number is meaningless for UDP packets. This statement is nonsense. Both TCP and UDP have 16-bit port numbers and both use the sockets API.