again, not to sidetrack too much, but if there's a handshake, they have the right routes, so it's got to be something other than IP