Hello, Is there a way for winpcap to inform me the size of the ethernet (or whatever) header? Do I really have to check pcap_datalink(pd) myself? I was wondering, since winpcap can tell me if it's an ip address or not, it must know the header size before the ip address. Thanks, Bye, Ramiro Polla