I believe tshark (and wireshark of course) is also be capable of showing bad or corrupted traffic. You can set filters, i.e. to filter out rejects and similar, and if they are abnormal high, you know, something is bad. Just an idea... Best Hans