On Friday 27 February 2009, you wrote: > > I should be able to catch this in a TCP dump if needed. > > That would be nice, please do so. Would an strace help as well? If so, for what system calls? Seems logical to do both at the same time so results can be matched.