why use a hex editor? why not use ethereal? it handles tcpdump files fantabulously....and it's avail on *nix and windows AND macs....
-d.
