[root@mbox ~]# tcpdump -n "port 82" tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 16:54:37.057743 IP 202.5.145.57.2659 > 202.5.145.56.82: S 1338026472:1338026472(0) win 65535 16:54:37.979831 IP 64.113.76.55.51450 > 202.5.145.56.82: S 686090109:686090109(0) win 5840 16:54:39.992680 IP 202.5.145.57.2659 > 202.5.145.56.82: S 1338026472:1338026472(0) win 65535 16:54:40.964983 IP 64.113.76.55.51450 > 202.5.145.56.82: S 686090109:686090109(0) win 5840 16:54:45.910571 IP 202.5.145.57.2659 > 202.5.145.56.82: S 1338026472:1338026472(0) win 65535 16:54:47.036879 IP 64.113.76.55.51450 > 202.5.145.56.82: S 686090109:686090109(0) win 5840 16:54:58.970161 IP 64.113.76.55.51450 > 202.5.145.56.82: S 686090109:686090109(0) win 5840