:~$ sudo tcpdump -i eth1 tcp | grep 192.168.1.2
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 262144 bytes
16:46:17.762260 IP 192.168.200.100.55623 > 192.168.1.2.http: Flags [S], seq 3679764859, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
16:46:17.763359 IP host129-0-0-0.mtn.cm.49320 > 192.168.1.2.51300: Flags [R.E] [bad hdr length 52 - too long, > 32]
16:46:18.012569 IP 192.168.200.100.55624 > 192.168.1.2.http: Flags [S], seq 4243009063, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
Doing a tcp dump yeilds these results
