What if you used a program called Ethereal to capture the traffic you want to sniff. Figure out what trigger you are looking for and then program that into your project? Ethereal can get very detailed and can show you where the data is in the packets you are looking for. It parses out the data automatically based on what protocol it's sent and can show you the raw data if you need to see it.

Dave, If I'm following the links you are talking about correctly, one of them mentions turning on ICF if running SP1, and the other mentions if u want to use raw sockets without restriction, use Windows 2003 Server. In both cases it seems as if the issue is with sending data on Raw sockets. In my example, i'm actually trying to receive data on raw sockets. So, given that, it seems like it should work. This error is preventing me from proceeding. Any other thoughts on how to solve this? Also, Thanks again for your help to this point. Tom

AFAIK, what you are attempting to do can't be done using the .NET API as it provides only application level operations. Regards Senthil _____________________________ My Blog | My Articles | WinMacro