[0] root@fireengine:~# tpcdump host 134.129.223.71                                                                                                                         [5:25:16]
zsh: correct 'tpcdump' to 'tcpdump' [nyae]? y
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ath0, link-type EN10MB (Ethernet), capture size 96 bytes
05:25:28.314668 IP 192.168.7.2.1817 > hardcore.cs.und.edu.http: S 3676788131:3676788131(0) win 16384 <mss 1460,nop,nop,sackOK>
05:25:31.269875 IP 192.168.7.2.1817 > hardcore.cs.und.edu.http: S 3676788131:3676788131(0) win 16384 <mss 1460,nop,nop,sackOK>
05:25:37.178638 IP 192.168.7.2.1817 > hardcore.cs.und.edu.http: S 3676788131:3676788131(0) win 16384 <mss 1460,nop,nop,sackOK>

[1] root@fireengine:~# tcpdump -i nve0 host 134.129.223.71                                                                                                                 [5:27:06]
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on nve0, link-type EN10MB (Ethernet), capture size 96 bytes
05:27:15.166058 IP dsl-134-129-144-147.und.nodak.edu.52491 > hardcore.cs.und.edu.http: S 1170478654:1170478654(0) win 16384 <mss 1460,nop,nop,sackOK>
05:27:15.195634 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.52491: S 3264547891:3264547891(0) ack 1170478655 win 5840 <mss 1380,nop,nop,sackOK>
05:27:18.128398 IP dsl-134-129-144-147.und.nodak.edu.52491 > hardcore.cs.und.edu.http: S 1170478654:1170478654(0) win 16384 <mss 1460,nop,nop,sackOK>
05:27:18.163655 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.52491: S 3264547891:3264547891(0) ack 1170478655 win 5840 <mss 1380,nop,nop,sackOK>
05:27:19.389916 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.52491: S 3264547891:3264547891(0) ack 1170478655 win 5840 <mss 1380,nop,nop,sackOK>
05:27:24.136600 IP dsl-134-129-144-147.und.nodak.edu.52491 > hardcore.cs.und.edu.http: S 1170478654:1170478654(0) win 16384 <mss 1460,nop,nop,sackOK>
05:27:24.166481 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.52491: S 3264547891:3264547891(0) ack 1170478655 win 5840 <mss 1380,nop,nop,sackOK>
05:27:25.390286 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.52491: S 3264547891:3264547891(0) ack 1170478655 win 5840 <mss 1380,nop,nop,sackOK>
05:27:37.590591 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.52491: S 3264547891:3264547891(0) ack 1170478655 win 5840 <mss 1380,nop,nop,sackOK>

# And now connecting from the host computer instead of the client
05:28:03.120109 IP dsl-134-129-144-147.und.nodak.edu.53389 > hardcore.cs.und.edu.http: S 1180343514:1180343514(0) win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 616300159 0,sackOK,eol>
05:28:03.165974 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.53389: S 2870077950:2870077950(0) ack 1180343515 win 5792 <mss 1380,sackOK,timestamp 1037206975 616300159,nop,wscale 0>
05:28:03.165997 IP dsl-134-129-144-147.und.nodak.edu.53389 > hardcore.cs.und.edu.http: . ack 1 win 32832 <nop,nop,timestamp 616300205 1037206975>
05:28:03.166200 IP dsl-134-129-144-147.und.nodak.edu.53389 > hardcore.cs.und.edu.http: P 1:333(332) ack 1 win 32832 <nop,nop,timestamp 616300205 1037206975>
05:28:03.271532 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.53389: . ack 333 win 6432 <nop,nop,timestamp 1037206985 616300205>
05:28:03.458080 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.53389: . 1:1369(1368) ack 333 win 6432 <nop,nop,timestamp 1037207004 616300205>
05:28:03.459595 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.53389: . 1369:2737(1368) ack 333 win 6432 <nop,nop,timestamp 1037207004 616300205>
05:28:03.459634 IP dsl-134-129-144-147.und.nodak.edu.53389 > hardcore.cs.und.edu.http: . ack 2737 win 31976 <nop,nop,timestamp 616300498 1037207004>
05:28:03.475434 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.53389: . 2737:4105(1368) ack 333 win 6432 <nop,nop,timestamp 1037207004 616300205>
05:28:03.493046 IP dsl-134-129-144-147.und.nodak.edu.53389 > hardcore.cs.und.edu.http: . ack 4105 win 32832 <nop,nop,timestamp 616300532 1037207004>
05:28:03.602051 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.53389: . 4105:5473(1368) ack 333 win 6432 <nop,nop,timestamp 1037207018 616300498>
05:28:03.603688 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.53389: . 5473:6841(1368) ack 333 win 6432 <nop,nop,timestamp 1037207018 616300498>
05:28:03.603736 IP dsl-134-129-144-147.und.nodak.edu.53389 > hardcore.cs.und.edu.http: . ack 6841 win 32148 <nop,nop,timestamp 616300643 1037207018>
05:28:03.605205 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.53389: P 6841:8145(1304) ack 333 win 6432 <nop,nop,timestamp 1037207018 616300498>
05:28:03.704646 IP dsl-134-129-144-147.und.nodak.edu.53389 > hardcore.cs.und.edu.http: . ack 8145 win 32832 <nop,nop,timestamp 616300744 1037207018>
05:28:18.463677 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.53389: F 8145:8145(0) ack 333 win 6432 <nop,nop,timestamp 1037208505 616300744>
05:28:18.463695 IP dsl-134-129-144-147.und.nodak.edu.53389 > hardcore.cs.und.edu.http: . ack 8146 win 32832 <nop,nop,timestamp 616315502 1037208505>
05:28:19.606865 IP dsl-134-129-144-147.und.nodak.edu.53389 > hardcore.cs.und.edu.http: F 333:333(0) ack 8146 win 32832 <nop,nop,timestamp 616316646 1037208505>
05:28:19.639953 IP hardcore.cs.und.edu.http > dsl-134-129-144-147.und.nodak.edu.53389: . ack 334 win 6432 <nop,nop,timestamp 1037208622 616316646>