Hello all I need some help with a possible packet corruption issue. I have been successfully tunneling vnc thru ssh(local forward). I have recently been trying to make a similar connection to ftp srv on same machine as the vnc srv. My client pc is w2k and the ftp/vnc srv are also w2k. sshd is on redhat 9. I have full funtionability from ftp srv when connecting directly. But when I tunnel I am able to get thru the login for ftp but when I try to get, put, dir, ls I get a error 500(syntax) error from srv. I have been sniffing the packets on the ftp srv int in an attempt to locate the problem but I am not sure what part of the packet I should focus my search. I have no idea what layer the breakdown is occuring. I have logged packets with etherdetect, from successful ftp connections from another local w2k box and from the linux box. I am comparing them to the unsuccessful packets from the tunnel. I am looking at the packet, corresponding between my three captures, that preceeds the error on the tunnel session. Does anyone know what I should look for and what I might do to correct. Please help. I fear it may be something simple I am overlooking. Any thoughts would be much appreciated.