Hello, you can use tcpdump with theses options into your netkit machines: -w test.pcap (store trafic in a file) -s 0 (store all content of paquets, not just first bytes). The you can use /hosthome (http://www.netkit.org/faq.html#q03) to put the pcap outside your UML machine and read it with wireshark. Regards.