Cheers, I'll check them out, I used to record PCAPs when I was using KVM's multicast network emulation, as it was easy to pick up all network traffic, its become more difficult using VDE, as I don't believe theres a way to record all traffic through a single tap interface.