root@client:~# tcpdump -n -vv -X 'tcp port 65095' tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 16:35:22.439095 IP (tos 0x0, ttl 64, id 50831, offset 0, flags [DF], proto TCP (6), length 60) CLIENT.38106 > SERVER.65095: Flags [S], cksum 0xb108 (correct), seq 501359012, win 5840, options [mss 1460,sackOK,TS val 15787819 ecr 0,nop,wscale 4], length 0 0x0000: 4500 003c c68f 4000 4006 aec6 -CLI ENT- E..<..@.@...CLNT 0x0010: -SER VER- 94da fe47 1de2 21a4 0000 0000 SRVR...G..!..... 0x0020: a002 16d0 b108 0000 0204 05b4 0402 080a ................ 0x0030: 00f0 e72b 0000 0000 0103 0304 ...+........ 16:35:22.454763 IP (tos 0x0, ttl 128, id 63112, offset 0, flags [none], proto TCP (6), length 44) SERVER.65095 > CLIENT.38106: Flags [S.], cksum 0x3c93 (correct), seq 1851677220, ack 501359013, win 64240, options [mss 1460], length 0 0x0000: 4500 002c f688 0000 8006 7edd -SER VER- E..,......~.SRVR 0x0010: -CLI ENT- fe47 94da 6e5e 5a24 1de2 21a5 CLNT.G..n^Z$..!. 0x0020: 6012 faf0 3c93 0000 0204 05b4 0000 `...<......... 16:35:22.454797 IP (tos 0x0, ttl 64, id 50832, offset 0, flags [DF], proto TCP (6), length 40) CLIENT.38106 > SERVER.65095: Flags [.], cksum 0x3871 (correct), seq 1, ack 1, win 5840, length 0 0x0000: 4500 0028 c690 4000 4006 aed9 -CLI ENT- E..(..@.@...CLNT 0x0010: -SER VER- 94da fe47 1de2 21a5 6e5e 5a25 SRVR...G..!.n^Z% 0x0020: 5010 16d0 3871 0000 P...8q.. 16:35:22.455106 IP (tos 0x0, ttl 64, id 50833, offset 0, flags [DF], proto TCP (6), length 44) CLIENT.38106 > SERVER.65095: Flags [P.], cksum 0x3361 (correct), seq 1:5, ack 1, win 5840, length 4 0x0000: 4500 002c c691 4000 4006 aed4 -CLI ENT- E..,..@.@...CLNT 0x0010: -SER VER- 94da fe47 1de2 21a5 6e5e 5a25 SRVR...G..!.n^Z% 0x0020: 5018 16d0 3361 0000 0502 0002 P...3a...... 16:35:22.455295 IP (tos 0x0, ttl 128, id 63113, offset 0, flags [none], proto TCP (6), length 40) SERVER.65095 > CLIENT.38106: Flags [.], cksum 0x544c (correct), seq 1, ack 5, win 64240, length 0 0x0000: 4500 0028 f689 0000 8006 7ee0 -SER VER- E..(......~.SRVR 0x0010: -CLI ENT- fe47 94da 6e5e 5a25 1de2 21a9 CLNT.G..n^Z%..!. 0x0020: 5010 faf0 544c 0000 0000 0000 0000 P...TL........ 16:35:22.507821 IP (tos 0x0, ttl 128, id 63114, offset 0, flags [none], proto TCP (6), length 40) SERVER.65095 > CLIENT.38106: Flags [R.], cksum 0x5448 (correct), seq 1, ack 5, win 64240, length 0 0x0000: 4500 0028 f68a 0000 8006 7edf -SER VER- E..(......~.SRVR 0x0010: -CLI ENT- fe47 94da 6e5e 5a25 1de2 21a9 CLNT.G..n^Z%..!. 0x0020: 5014 faf0 5448 0000 0000 0000 0000 P...TH........