since Ethereal (presumably running on the host Win2k box) is seeing the DHCP packets

A worry is that Zone Alarm might be hiding packets from Ethereal, even when it is turned off. I don't know which hooks into the network stack at the lowest level.
_________________________
Remind me to change my signature to something more interesting someday