It was the proxy server, and since web pages load so fast anyways, it was only seen when doing larger downloads.

Again a simple matter of follow the packet...
_________________________
Today is the tomorrow you worried about yesterday.