“... even if it was already running” You didn’t stop the LAT service, or does that get done automatically in LAT$STARTUP? It would be interesting to know whether the originating MAC address changes in outbound LAT frames.