23:02:57.121780 receiveServer.yourDomain.com.ssh > targetServer.yourDomain.com.1060: P 2193476388:2193476432(44) ack 3461777800 win 16060 (DF) [tos 0x10]
23:02:57.121937 targetServer.yourDomain.com.1060 > receiveServer.yourDomain.com.ssh: . ack 44 win 16328 (DF)
23:02:57.123952 receiveServer.yourDomain.com.2113 > dns.yourDomain.com.domain: 56467+ (45)
23:02:57.124389 dns.yourDomain.com.domain > receiveServer.yourDomain.com.2113: 56467* 1/3/3 (189)
23:02:57.124931 receiveServer.yourDomain.com.2113 > dns.yourDomain.com.domain: 56468+ (44)
23:02:57.125371 dns.yourDomain.com.domain > receiveServer.yourDomain.com.2113: 56468* 1/3/3 (189)
23:02:57.125953 receiveServer.yourDomain.com.ssh > targetServer.yourDomain.com.1060: P 44:336(292) ack 1 win 16060 (DF) [tos 0x10]
23:02:57.126299 receiveServer.yourDomain.com.2113 > dns.yourDomain.com.domain: 56469+ (41)
23:02:57.126818 dns.yourDomain.com.domain > receiveServer.yourDomain.com.2113: 56469* 1/4/4 (209)
23:02:57.127455 receiveServer.yourDomain.com.ssh > targetServer.yourDomain.com.1060: P 336:628(292) ack 1 win 16060 (DF) [tos 0x10]

##</code><code>##

                          123456789          2         3         4         5         6     
% cat data.output | perl -ne'undef$/;/.{6}(.{9}).*[\d|:]{6}([\d|\.]{9})(?!\n)/s,print$2-$1'

##</code><code>##

                          123456789          2         3         4         5         6     
% cat data.output | perl -n0e'/.{6}(.{9}).*[\d|:]{6}([\d|\.]{9})(?!\n)/s,print$2-$1.'