Recently updated tcpdump package (both FC-5 and FC-6) has executable bit set (rwxr-xr-x) on the download servers, which can be visible throw ftp access. Something going wrong?... Dmitry Butskoy