*snip* incoming connection from=(111.111.111.111:1234) to=(22.22.22.22:80) *snip* ASCII data in TCP packet from=(111.111.111.111:1234), localport=(80), *data here*