Tim, > Client Ethernet Address: 00:0d:3a:4e:f4:da [|bootp] The [|bootp] means your packets are truncated and all the interesting stuff is missing. You need to specify the snap length to tcpdump. tcpdump -s 1500 -n -v -i eth0 udp port 67 or 68 Regards, Andrew J Hood