root@HERMES:~$ tcpdump -ttnnvvS 'tcp and net 192.168.18.0/24' tcpdump: listening on ethwan, link-type EN10MB (Ethernet), capture size 262144 bytes 1612532228.397661 IP (tos 0x0, ttl 63, id 13929, offset 0, flags [DF], proto TCP (6), length 52) 192.168.18.2.54818 > 192.168.18.1.80: Flags [S], cksum 0xe5dc (correct), seq 3899533838, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0 1612532228.398192 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 52) 192.168.18.1.80 > 192.168.18.2.54818: Flags [S.], cksum 0x6b28 (correct), seq 3067119039, ack 3899533839, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 3], length 0 1612532228.398911 IP (tos 0x0, ttl 63, id 13930, offset 0, flags [DF], proto TCP (6), length 40) 192.168.18.2.54818 > 192.168.18.1.80: Flags [.], cksum 0xe308 (correct), seq 3899533839, ack 3067119040, win 502, length 0 1612532228.591851 IP (tos 0x0, ttl 64, id 27663, offset 0, flags [DF], proto TCP (6), length 507) 192.168.18.1.80 > 192.168.18.2.54818: Flags [FP.], cksum 0x52f1 (correct), seq 3067119452:3067119919, ack 3899534340, win 2093, length 467: HTTP 1612532228.596974 IP (tos 0x0, ttl 63, id 13936, offset 0, flags [DF], proto TCP (6), length 40) 192.168.18.2.54818 > 192.168.18.1.80: Flags [F.], cksum 0xdda3 (correct), seq 3899534340, ack 3067119920, win 501, length 0 1612532228.597411 IP (tos 0x0, ttl 64, id 27664, offset 0, flags [DF], proto TCP (6), length 40) 192.168.18.1.80 > 192.168.18.2.54818: Flags [.], cksum 0xd76b (correct), seq 3067119920, ack 3899534341, win 2093, length 0 1612532228.598786 IP (tos 0x0, ttl 63, id 64322, offset 0, flags [DF], proto TCP (6), length 52) 192.168.18.2.54820 > 192.168.18.1.80: Flags [S], cksum 0x7b93 (correct), seq 4176643025, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0 1612532228.599223 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 52) 192.168.18.1.80 > 192.168.18.2.54820: Flags [S.], cksum 0x7611 (correct), seq 274904827, ack 4176643026, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 3], length 0 1612532228.599942 IP (tos 0x0, ttl 63, id 64323, offset 0, flags [DF], proto TCP (6), length 40) 192.168.18.2.54820 > 192.168.18.1.80: Flags [.], cksum 0xedf1 (correct), seq 4176643026, ack 274904828, win 502, length 0 1612532228.604128 IP (tos 0x0, ttl 64, id 24356, offset 0, flags [DF], proto TCP (6), length 507) 192.168.18.1.80 > 192.168.18.2.54820: Flags [FP.], cksum 0x6117 (correct), seq 274905011:274905478, ack 4176643195, win 1825, length 467: HTTP 1612532228.604628 IP (tos 0x0, ttl 64, id 24357, offset 0, flags [DF], proto TCP (6), length 40) 192.168.18.1.80 > 192.168.18.2.54820: Flags [R.], cksum 0xe58e (correct), seq 274905479, ack 4176643195, win 1825, length 0 1612532228.611532 IP (tos 0x0, ttl 63, id 44109, offset 0, flags [DF], proto TCP (6), length 52) 192.168.18.2.54822 > 192.168.18.1.80: Flags [S], cksum 0x3645 (correct), seq 3432379770, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0 1612532228.612001 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 52) 192.168.18.1.80 > 192.168.18.2.54822: Flags [S.], cksum 0xd064 (correct), seq 2196415697, ack 3432379771, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 3], length 0 1612532228.612563 IP (tos 0x0, ttl 63, id 44110, offset 0, flags [DF], proto TCP (6), length 40) 192.168.18.2.54822 > 192.168.18.1.80: Flags [.], cksum 0x4845 (correct), seq 3432379771, ack 2196415698, win 502, length 0 1612532228.618717 IP (tos 0x0, ttl 64, id 19728, offset 0, flags [DF], proto TCP (6), length 40) 192.168.18.1.80 > 192.168.18.2.54822: Flags [F.], cksum 0x3f59 (correct), seq 2196416348, ack 3432379947, win 1959, length 0 1612532228.618842 IP (tos 0x0, ttl 63, id 44113, offset 0, flags [DF], proto TCP (6), length 40) 192.168.18.2.54822 > 192.168.18.1.80: Flags [.], cksum 0x450c (correct), seq 3432379947, ack 2196416348, win 501, length 0 1612532228.618873 IP (tos 0x0, ttl 64, id 19729, offset 0, flags [DF], proto TCP (6), length 40) 192.168.18.1.80 > 192.168.18.2.54822: Flags [R.], cksum 0x3f55 (correct), seq 2196416349, ack 3432379947, win 1959, length 0 1612532228.619373 IP (tos 0x0, ttl 64, id 54882, offset 0, flags [DF], proto TCP (6), length 40) 192.168.18.1.80 > 192.168.18.2.54822: Flags [R], cksum 0x09cf (correct), seq 2196416348, win 0, length 0 ^C 18 packets captured 18 packets received by filter 0 packets dropped by kernel