> The address in question is a multicast address so it's very possible > that two machines have the same multicast informtion. ? Ethernet multicast addresses match the pattern (ether[0] & 1 != 0), and the Ethernet address in question, 00:00:5E:00:01:1C, has a first byte of '00' - 00 & 1 = 0, (indicating a unicast Ethernet address). Stephen