root@HERMES:~$ tcpdump -ttnnvvS 'tcp and net 192.168.18.0/24'
tcpdump: listening on ethwan, link-type EN10MB (Ethernet), capture size 262144 bytes
1612530239.807502 IP (tos 0x0, ttl 63, id 6338, offset 0, flags [DF], proto TCP (6), length 52)
    192.168.18.2.54798 > 192.168.18.1.80: Flags [S], cksum 0xb418 (correct), seq 4024652913, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
1612530239.808064 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 52)
    192.168.18.1.80 > 192.168.18.2.54798: Flags [S.], cksum 0x90f7 (correct), seq 1577355000, ack 4024652914, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 3], length 0
1612530239.808814 IP (tos 0x0, ttl 63, id 6339, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.18.2.54798 > 192.168.18.1.80: Flags [.], cksum 0x08d8 (correct), seq 4024652914, ack 1577355001, win 502, length 0
1612530239.808876 IP (tos 0x0, ttl 63, id 6340, offset 0, flags [DF], proto TCP (6), length 223)
    192.168.18.2.54798 > 192.168.18.1.80: Flags [P.], cksum 0x7f17 (correct), seq 4024652914:4024653097, ack 1577355001, win 502, length 183: HTTP, length: 183
        POST /asp/GetRandCount.asp HTTP/1.1
        Host: 192.168.18.1
        User-Agent: python-requests/2.25.1
        Accept-Encoding: gzip, deflate
        Accept: */*
        Connection: keep-alive
        Content-Length: 0
        
1612530240.359236 IP (tos 0x0, ttl 64, id 26662, offset 0, flags [DF], proto TCP (6), length 522)
    192.168.18.1.80 > 192.168.18.2.54798: Flags [FP.], cksum 0xa1b0 (correct), seq 1577390430:1577390912, ack 4024653989, win 2361, length 482: HTTP
1612530240.361735 IP (tos 0x0, ttl 63, id 6369, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.18.2.54798 > 192.168.18.1.80: Flags [.], cksum 0x785d (correct), seq 4024653989, ack 1577390913, win 501, length 0
1612530240.390570 IP (tos 0x0, ttl 63, id 6370, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.18.2.54798 > 192.168.18.1.80: Flags [F.], cksum 0x785c (correct), seq 4024653989, ack 1577390913, win 501, length 0
1612530240.391007 IP (tos 0x0, ttl 64, id 21626, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.18.1.80 > 192.168.18.2.54798: Flags [.], cksum 0x7118 (correct), seq 1577390913, ack 4024653990, win 2361, length 0
^C
8 packets captured
8 packets received by filter
0 packets dropped by kernel