root@server:~# tcpdump -n -vv -X 'tcp port 65095' tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 16:36:33.410740 IP (tos 0x0, ttl 119, id 17502, offset 0, flags [DF], proto TCP (6), length 48) CLIENT.1568 > SERVER.65095: Flags [S], cksum 0x579f (correct), seq 1247808497, win 64240, options [mss 1460,nop,nop,sackOK], length 0 0x0000: 4500 0030 445e 4000 7706 e993 -CLI ENT- E..0D^@.w...CLNT 0x0010: -SER VER- 0620 fe47 4a60 0bf1 0000 0000 SRVR...GJ`...... 0x0020: 7002 faf0 579f 0000 0204 05b4 0101 0402 p...W........... 0x0030: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0x0040: 0000 0000 0000 0000 0000 0000 ............ 16:36:33.410787 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 48) SERVER.65095 > CLIENT.1568: Flags [S.], cksum 0x09b5 (correct), seq 1137438254, ack 1247808498, win 5840, options [mss 1460,nop,nop,sackOK], length 0 0x0000: 4500 0030 0000 4000 4006 64f2 -SER VER- E..0..@.@.d.SRVR 0x0010: -CLI ENT- fe47 0620 43cb ee2e 4a60 0bf2 CLNT.G..C...J`.. 0x0020: 7012 16d0 09b5 0000 0204 05b4 0101 0402 p............... 16:36:33.424767 IP (tos 0x0, ttl 119, id 17503, offset 0, flags [DF], proto TCP (6), length 40) CLIENT.1568 > SERVER.65095: Flags [.], cksum 0x5258 (correct), seq 1, ack 1, win 64240, length 0 0x0000: 4500 0028 445f 4000 7706 e99a -CLI ENT- E..(D_@.w...CLNT 0x0010: -SER VER- 0620 fe47 4a60 0bf2 43cb ee2f SRVR...GJ`..C../ 0x0020: 5010 faf0 5258 0000 0000 0000 0000 0000 P...RX.......... 0x0030: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0x0040: 0000 0000 0000 0000 0000 0000 ............ 16:36:33.428640 IP (tos 0x0, ttl 119, id 17504, offset 0, flags [DF], proto TCP (6), length 44) CLIENT.1568 > SERVER.65095: Flags [P.], cksum 0x4d48 (correct), seq 1:5, ack 1, win 64240, length 4 0x0000: 4500 002c 4460 4000 7706 e995 -CLI ENT- E..,D`@.w...CLNT 0x0010: -SER VER- 0620 fe47 4a60 0bf2 43cb ee2f SRVR...GJ`..C../ 0x0020: 5018 faf0 4d48 0000 0502 0002 0000 0000 P...MH.......... 0x0030: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0x0040: 0000 0000 0000 0000 0000 0000 ............ 16:36:33.428669 IP (tos 0x0, ttl 64, id 25459, offset 0, flags [DF], proto TCP (6), length 40) SERVER.65095 > CLIENT.1568: Flags [.], cksum 0x3675 (correct), seq 1, ack 5, win 5840, length 0 0x0000: 4500 0028 6373 4000 4006 0187 -SER VER- E..(cs@.@...SRVR 0x0010: -CLI ENT- fe47 0620 43cb ee2f 4a60 0bf6 CLNT.G..C../J`.. 0x0020: 5010 16d0 3675 0000 P...6u.. 16:36:33.429537 IP (tos 0x0, ttl 64, id 25460, offset 0, flags [DF], proto TCP (6), length 42) SERVER.65095 > CLIENT.1568: Flags [P.], cksum 0xd5f2 (incorrect -> 0x3169), seq 1:3, ack 5, win 5840, length 2 0x0000: 4500 002a 6374 4000 4006 0184 -SER VER- E..*ct@.@...SRVR 0x0010: -CLI ENT- fe47 0620 43cb ee2f 4a60 0bf6 CLNT.G..C../J`.. 0x0020: 5018 16d0 d5f2 0000 0502 P......... 16:36:33.436351 IP (tos 0x0, ttl 56, id 13330, offset 0, flags [none], proto TCP (6), length 40) CLIENT.1568 > SERVER.65095: Flags [R.], cksum 0xcfc6 (correct), seq 5, ack 3, win 32120, length 0 0x0000: 4500 0028 3412 0000 3806 78e8 -CLI ENT- E..(4...8.x.CLNT 0x0010: -SER VER- 0620 fe47 4a60 0bf6 43cb ee31 SRVR...GJ`..C..1 0x0020: 5014 7d78 cfc6 0000 0000 0000 0000 0000 P.}x............ 0x0030: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0x0040: 0000 0000 0000 0000 0000 0000 ............ 16:36:33.443327 IP (tos 0x0, ttl 119, id 17510, offset 0, flags [DF], proto TCP (6), length 40) CLIENT.1568 > SERVER.65095: Flags [.], cksum 0x5254 (correct), seq 5, ack 1, win 64240, length 0 0x0000: 4500 0028 4466 4000 7706 e993 -CLI ENT- E..(Df@.w...CLNT 0x0010: -SER VER- 0620 fe47 4a60 0bf6 43cb ee2f SRVR...GJ`..C../ 0x0020: 5010 faf0 5254 0000 0000 0000 0000 0000 P...RT.......... 0x0030: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0x0040: 0000 0000 0000 0000 0000 0000 ............ 16:36:33.443345 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 40) SERVER.65095 > CLIENT.1568: Flags [R], cksum 0xa3a7 (correct), seq 1137438255, win 0, length 0 0x0000: 4500 0028 0000 4000 4006 64fa -SER VER- E..(..@.@.d.SRVR 0x0010: -CLI ENT- fe47 0620 43cb ee2f 0000 0000 CLNT.G..C../.... 0x0020: 5004 0000 a3a7 0000 P.......