# tcpdump -i eth0 port 80 -Xns 1000 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 1000 bytes 16:28:11.574091 IP 64.122.133.210.26595 > 13.222.111.110.http: Flags [S], seq 2155308325, win 65535, options [mss 1304,nop,nop,sackOK], length 0 0x0000: 4500 0030 c790 4000 7606 83f2 3dc2 39fa [email protected]...=.9. 0x0010: