Isn't it unsurpsrising that >40% of packets are small? ACKs? If one made the gross oversimplifying approximation that everything is unidirectional TCP traffic, then you'd expect to see one ACK per two data packets. Thus, we'd expect to see 33% at 40 bytes. It is the additional 7+% that's surprising. Tony