MSIE 6 and ntlm

Hi,

I am having an issue with NTLM auth with MSIE which doesnt occur using
Firefox. I get a type 2 response from my app server but MSIE decides
to retransmit the type 1 message instead of replying with a type3...

My suspicion is that firefox may handle a dropped
'keep-alive'connection, whereas MSIE will not send the type 3 message
if it needs to create a new connection. Im having a hard time
determing if the keep alive connection really has been dropped (I see
a 'Connection: close' header with the type 2 response but it also
contains a 'Content-Length' header, and I believe the Connection: close
response header should be deprecated)

Is there a way to get more info out of MSIE to determine if the keep
alive connection is not present? A debug mode/log would be great!

thanks for any help

rgds
j.