root@citadel-station:~# tcpdump -tt -vv 'tcp[13] & 7 != 0 and ( host 10.5.128.128 or host 10.5.128.129 )' tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 1227686735.576050 IP (tos 0x0, ttl 64, id 5106, offset 0, flags [DF], proto TCP (6), length 52) citadel-station-internal.48951 > 10.5.128.129.3260: F, cksum 0xa08b (correct), 3271066723:3271066723(0) ack 1209637382 win 1525 1227686735.576050 IP (tos 0x0, ttl 64, id 41335, offset 0, flags [DF], proto TCP (6), length 52) 10.5.128.129.3260 > citadel-station-internal.48951: F, cksum 0x9d7d (correct), 1:1(0) ack 1 win 2304 1227686735.580050 IP (tos 0x0, ttl 64, id 33691, offset 0, flags [DF], proto TCP (6), length 60) citadel-station-internal.40097 > 10.5.128.128.3260: S, cksum 0xb9fa (correct), 717388914:717388914(0) win 5840 1227686735.580050 IP (tos 0x0, ttl 64, id 41336, offset 0, flags [DF], proto TCP (6), length 60) 10.5.128.128.3260 > citadel-station-internal.40097: S, cksum 0x1121 (correct), 1618305574:1618305574(0) ack 717388915 win 65535 1227686736.836046 IP (tos 0x0, ttl 64, id 44508, offset 0, flags [DF], proto TCP (6), length 132) 10.5.128.128.3260 > citadel-station-internal.40097: FP 1:81(80) ack 261 win 2304 1227686737.088045 IP (tos 0x0, ttl 64, id 33695, offset 0, flags [DF], proto TCP (6), length 52) citadel-station-internal.40097 > 10.5.128.128.3260: F, cksum 0x39e2 (correct), 261:261(0) ack 82 win 46 1227686737.088045 IP (tos 0x0, ttl 64, id 61814, offset 0, flags [DF], proto TCP (6), length 60) citadel-station-internal.53556 > 10.5.128.129.3260: S, cksum 0x0e3f (correct), 751628309:751628309(0) win 5840 1227686737.088045 IP (tos 0x0, ttl 64, id 45023, offset 0, flags [DF], proto TCP (6), length 60) 10.5.128.129.3260 > citadel-station-internal.53556: S, cksum 0x29af (correct), 1838452925:1838452925(0) ack 751628310 win 65535