diff --git a/Reverse-Proxy-Diagnostics-Troubleshooting.md b/Reverse-Proxy-Diagnostics-Troubleshooting.md
index 161fd33..1939866 100644
--- a/Reverse-Proxy-Diagnostics-Troubleshooting.md
+++ b/Reverse-Proxy-Diagnostics-Troubleshooting.md
@@ -174,4 +174,14 @@ Content-Type: text/html
 Content-Length: 8091
 Connection: keep-alive
 Last-Modified: Wed, 13 Mar 2024 05:36:47 GMT
+```
+
+# Packet Capture
+
+## using ngrep
+
+One can use `ngrep` to watch traffic between reverse proxy and "radicale" (example) - but only senseful if this connection has no encryption active.
+
+```
+ngrep -d lo port 5232
 ```
\ No newline at end of file