Once again, tcpdump saves my ass. I have lost count of how many times tcpdump helps me debug some asshat inherited code.