17:11:21:3514:root@fionnay:~# tcpdump -i eth0 port 22
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
17:12:52.925849 IP 10.0.0.9.46504 > topjaklont.student.utwente.nl.ssh: F 352410729:352410729(0) ack 3869304382 win 1460 <nop,nop,timestamp 2338734 208339106>
17:12:52.938765 IP topjaklont.student.utwente.nl.ssh > 10.0.0.9.46504: . ack 1 win 181 <nop,nop,timestamp 208384363 2338734>
17:12:53.703914 IP 10.0.0.9.46509 > topjaklont.student.utwente.nl.ssh: S 536052608:536052608(0) win 5840 <mss 1460,sackOK,timestamp 2339512 0,nop,wscale 2>
17:12:53.714994 IP topjaklont.student.utwente.nl.ssh > 10.0.0.9.46509: S 4080967153:4080967153(0) ack 536052609 win 5792 <mss 1460,sackOK,timestamp 208384557 2339512,nop,wscale 5>
17:12:53.715015 IP 10.0.0.9.46509 > topjaklont.student.utwente.nl.ssh: . ack 1 win 1460 <nop,nop,timestamp 2339523 208384557>