Hi Nordin,Do you think it's coming from Wireshark?If you can send the pcap file, I can check with wireshark 1.0.8 on debian and let you know. It works fine for me.Eric