I believe that the latest 4.16 patchsets allow all packets related to a particular authentication to be linked/tracked - you might find that to be useful alan -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.open.com.au/pipermail/radiator/attachments/20160324/c1289150/attachment.html