proteus:~ # tcpdump -v -n -i venet0 -p host xxx.xxx.xxx.xxx tcpdump: WARNING: arptype 65535 not supported by libpcap - falling back to cooked socket tcpdump: listening on venet0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes 12:27:22.311605 IP (tos 0x0, ttl 47, id 57252, offset 0, flags [DF], proto TCP (6), length 60) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: S, cksum 0x7760 (correct), 688670719:688670719(0) win 5840 12:27:22.311692 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: S, cksum 0xac31 (correct), 3892930910:3892930910(0) ack 688670720 win 5792 12:27:22.683575 IP (tos 0x0, ttl 47, id 57254, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0xea70 (correct), ack 1 win 1460 12:27:24.664130 IP (tos 0x0, ttl 47, id 57256, offset 0, flags [DF], proto TCP (6), length 240) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: P 1:189(188) ack 1 win 1460 12:27:24.664163 IP (tos 0x0, ttl 64, id 45527, offset 0, flags [DF], proto TCP (6), length 52) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: ., cksum 0xd7c6 (correct), ack 189 win 1716 12:27:24.674508 IP (tos 0x0, ttl 64, id 45529, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 1:1449(1448) ack 189 win 1716 12:27:24.674546 IP (tos 0x0, ttl 64, id 45531, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 1449:2897(1448) ack 189 win 1716 12:27:25.046601 IP (tos 0x0, ttl 47, id 57258, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0xcec2 (correct), ack 1449 win 2184 12:27:25.046658 IP (tos 0x0, ttl 64, id 45533, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 2897:4345(1448) ack 189 win 1716 12:27:25.046666 IP (tos 0x0, ttl 64, id 45535, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 4345:5793(1448) ack 189 win 1716 12:27:25.046610 IP (tos 0x0, ttl 47, id 57260, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0xc645 (correct), ack 2897 win 2908 12:27:25.046683 IP (tos 0x0, ttl 64, id 45537, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 5793:7241(1448) ack 189 win 1716 12:27:25.046689 IP (tos 0x0, ttl 64, id 45539, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 7241:8689(1448) ack 189 win 1716 12:27:25.418835 IP (tos 0x0, ttl 47, id 57262, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0xbae1 (correct), ack 4345 win 3632 12:27:25.418909 IP (tos 0x0, ttl 64, id 45541, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 8689:10137(1448) ack 189 win 1716 12:27:25.418918 IP (tos 0x0, ttl 64, id 45543, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: P 10137:11585(1448) ack 189 win 1716 12:27:25.418847 IP (tos 0x0, ttl 47, id 57264, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0xb265 (correct), ack 5793 win 4356 12:27:25.418946 IP (tos 0x0, ttl 64, id 45545, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: P 11585:13033(1448) ack 189 win 1716 12:27:25.418854 IP (tos 0x0, ttl 47, id 57266, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0xa9e9 (correct), ack 7241 win 5080 12:27:25.419006 IP (tos 0x0, ttl 47, id 57268, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0xa16d (correct), ack 8689 win 5804 12:27:25.419248 IP (tos 0x0, ttl 64, id 45547, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 13033:14481(1448) ack 189 win 1716 12:27:25.419265 IP (tos 0x0, ttl 64, id 45549, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 14481:15929(1448) ack 189 win 1716 12:27:25.419282 IP (tos 0x0, ttl 64, id 45551, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 15929:17377(1448) ack 189 win 1716 12:27:25.791059 IP (tos 0x0, ttl 47, id 57270, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0x9608 (correct), ack 10137 win 6528 12:27:25.791105 IP (tos 0x0, ttl 64, id 45553, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 17377:18825(1448) ack 189 win 1716 12:27:25.791111 IP (tos 0x0, ttl 64, id 45555, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 18825:20273(1448) ack 189 win 1716 12:27:25.791067 IP (tos 0x0, ttl 47, id 57272, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0x8d8c (correct), ack 11585 win 7252 12:27:25.791125 IP (tos 0x0, ttl 64, id 45557, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 20273:21721(1448) ack 189 win 1716 12:27:25.791129 IP (tos 0x0, ttl 64, id 45559, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 21721:23169(1448) ack 189 win 1716 12:27:25.791168 IP (tos 0x0, ttl 47, id 57274, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0x8510 (correct), ack 13033 win 7976 12:27:25.791183 IP (tos 0x0, ttl 64, id 45561, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 23169:24617(1448) ack 189 win 1716 12:27:25.791187 IP (tos 0x0, ttl 64, id 45563, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: P 24617:26065(1448) ack 189 win 1716 12:27:25.791556 IP (tos 0x0, ttl 47, id 57276, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0x7c94 (correct), ack 14481 win 8700 12:27:25.791563 IP (tos 0x0, ttl 47, id 57278, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0x76eb (correct), ack 15929 win 8700 12:27:25.791746 IP (tos 0x0, ttl 64, id 45565, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 26065:27513(1448) ack 189 win 1716 12:27:25.791767 IP (tos 0x0, ttl 64, id 45567, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 27513:28961(1448) ack 189 win 1716 12:27:25.791781 IP (tos 0x0, ttl 64, id 45569, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 28961:30409(1448) ack 189 win 1716 12:27:25.791804 IP (tos 0x0, ttl 47, id 57280, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: ., cksum 0x7143 (correct), ack 17377 win 8700 12:27:25.791818 IP (tos 0x0, ttl 64, id 45571, offset 0, flags [DF], proto TCP (6), length 1500) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 30409:31857(1448) ack 189 win 1716 12:27:25.791823 IP (tos 0x0, ttl 64, id 45573, offset 0, flags [DF], proto TCP (6), length 1203) yyy.yyy.yyy.yyy.80 > xxx.xxx.xxx.xxx.45997: . 31857:33008(1151) ack 189 win 1716 12:27:26.105340 IP (tos 0x0, ttl 47, id 57282, offset 0, flags [DF], proto TCP (6), length 52) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0x7006 (correct), 189:189(0) ack 17377 win 8700 12:27:26.163048 IP (tos 0x0, ttl 47, id 17050, offset 0, flags [DF], proto TCP (6), length 40) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0xcb8d (correct), 688670908:688670908(0) win 0 12:27:26.163287 IP (tos 0x0, ttl 47, id 17051, offset 0, flags [DF], proto TCP (6), length 40) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0xcb8d (correct), 688670908:688670908(0) win 0 12:27:26.163296 IP (tos 0x0, ttl 47, id 17052, offset 0, flags [DF], proto TCP (6), length 40) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0xcb8d (correct), 688670908:688670908(0) win 0 12:27:26.163331 IP (tos 0x0, ttl 47, id 17054, offset 0, flags [DF], proto TCP (6), length 40) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0xcb8d (correct), 688670908:688670908(0) win 0 12:27:26.163543 IP (tos 0x0, ttl 47, id 17055, offset 0, flags [DF], proto TCP (6), length 40) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0xcb8d (correct), 688670908:688670908(0) win 0 12:27:26.163800 IP (tos 0x0, ttl 47, id 17056, offset 0, flags [DF], proto TCP (6), length 40) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0xcb8d (correct), 688670908:688670908(0) win 0 12:27:26.164062 IP (tos 0x0, ttl 47, id 17058, offset 0, flags [DF], proto TCP (6), length 40) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0xcb8d (correct), 688670908:688670908(0) win 0 12:27:26.164072 IP (tos 0x0, ttl 47, id 17059, offset 0, flags [DF], proto TCP (6), length 40) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0xcb8d (correct), 688670908:688670908(0) win 0 12:27:26.164301 IP (tos 0x0, ttl 47, id 17060, offset 0, flags [DF], proto TCP (6), length 40) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0xcb8d (correct), 688670908:688670908(0) win 0 12:27:26.164539 IP (tos 0x0, ttl 47, id 17061, offset 0, flags [DF], proto TCP (6), length 40) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0xcb8d (correct), 688670908:688670908(0) win 0 12:27:26.164545 IP (tos 0x0, ttl 47, id 17062, offset 0, flags [DF], proto TCP (6), length 40) xxx.xxx.xxx.xxx.45997 > yyy.yyy.yyy.yyy.80: R, cksum 0xcb8d (correct), 688670908:688670908(0) win 0 52 packets captured 52 packets received by filter 0 packets dropped by kernel