[root@testser ~]# tcpdump -A -s 1500 port 2000
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 1500 bytes
03:10:31.550934 IP 10.99.4.12.4482 > XX.XX.102.99.sieve: S 1610658224:1610658224(0) win 16
E..(.   ..?..g
c..>.fc....`.......P....p........
03:10:31.550946 IP XX.XX.102.99.sieve > 10.99.4.12.4482: S 2587003549:2587003549(0) ack 1610658225 win 5840 <mss 1460>
E..,..@.@..m>.fc
c.......2..`...`...~.......
03:10:31.550951 IP 10.99.4.12.4482 > XX.XX.102.99.sieve: R 1610658225:1610658225(0) win 0
E..(a{....&.
c..>.fc....`...`...P.............
03:10:31.550953 IP 10.99.4.12.4482 > XX.XX.102.99.sieve: R 1610658225:1610658225(0) win 16
E..(....?.
Y
c..>.fc....`....2..P.............
03:10:56.453428 IP 10.99.4.12.10918 > XX.XX.102.99.sieve: S 30333:30333(0) win 5840
E..(p .....P
c..>.fc*.....v}..E      P.............
03:10:56.453438 IP XX.XX.102.99.sieve > 10.99.4.12.10918: S 2619086765:2619086765(0) ack 30334 win 5840 <mss 1460>
E..,..@.@..m>.fc
c....*.......v~`...q)......
03:10:56.453806 IP 10.99.4.12.10918 > XX.XX.102.99.sieve: R 30334:30334(0) win 0
E..(b.....%.
c..>.fc*.....v~..v~P.............
03:10:56.477782 IP 10.99.4.12.10919 > XX.XX.102.99.sieve: S 4664:4664(0) win 5840 <mss 1460,timestamp 1145389380 0,wscale 1,sackOK,eol>
E..<]......X
c..>.fc*......8..;%....zx.......
DEAD..........
03:10:56.477816 IP XX.XX.102.99.sieve > 10.99.4.12.10919: S 2625557316:2625557316(0) ack 4665 win 5792 <mss 1460,sackOK,timestamp 3986518 1145389380,nop,wscale 7>
E..<..@.@..]>.fc
c....*..~.D...9....oa.........
.<.VDEAD....
03:10:56.478447 IP 10.99.4.12.10919 > XX.XX.102.99.sieve: R 4665:4665(0) win 0
E..(b.....%.
c..>.fc*......9...9P.............
03:10:56.507437 IP 10.99.4.12.10920 > XX.XX.102.99.sieve: S 7711:7711(0) ack 28253 win 5840
E..(z[......
c..>.fc*.........n]P...&.........
03:10:56.507449 IP XX.XX.102.99.sieve > 10.99.4.12.10920: R 28253:28253(0) win 0
E..(..@.@..q>.fc
c....*...n]....P...[...
03:10:59.475273 IP 10.99.4.12.i3-sessionmgr > XX.XX.102.99.sieve: UDP, length 16
E..,c.....%F
c..>.fc.p......RTDM_WHO_ARE_YOU..
03:11:05.665831 IP 10.99.4.12.9966 > XX.XX.102.99.sieve: S 27446:27446(0) win 512 <timestamp 1 0,nop,nop>
E..4K@.....$
c..>.fc&.....k6........'w...
..........
03:11:05.665833 IP XX.XX.102.99.sieve > 10.99.4.12.9966: S 2632344186:2632344186(0) ack 27447 win 5792 <mss 1460,nop,nop,timestamp 3995705 1>
E..8..@.@..a>.fc
c....&...bz..k7.....3.........
.<.9....
03:11:05.665867 IP 10.99.4.12.9966 > XX.XX.102.99.sieve: R 27447:27447(0) win 0
E..(c.....$.
c..>.fc&.....k7..k7P....T........
03:11:06.745765 IP 10.99.4.12.7753 > XX.XX.102.99.sieve: S 15006:15006(0) win 512 <timestamp 2 0,nop,nop>
E..4_2.....2
c..>.fc.I....:.........`....
..........
03:11:06.745768 IP XX.XX.102.99.sieve > 10.99.4.12.7753: S 2623004081:2623004081(0) ack 15007 win 5792 <mss 1460,nop,nop,timestamp 3996785 2>
E..8..@.@..a>.fc
c.....I.W....:................
.<.q....
03:11:06.747769 IP 10.99.4.12.7753 > XX.XX.102.99.sieve: R 15007:15007(0) win 0
E..(c.....$.
c..>.fc.I....:...:.P...a*........
03:11:12.363671 IP 10.99.4.12.pxc-roid > XX.XX.102.99.sieve: S 733417245:733417245(0) win 65535 <mss 1460,nop,nop,sackOK>
E..0d2@....6
c..>.fc....+.......p...}x..........
03:11:12.363680 IP XX.XX.102.99.sieve > 10.99.4.12.pxc-roid: S 2642339658:2642339658(0) ack 733417246 win 5840 <mss 1460,nop,nop,sackOK>
E..0..@.@..i>.fc
c.......~.J+...p...............
03:11:12.364439 IP 10.99.4.12.pxc-roid > XX.XX.102.99.sieve: . ack 1 win 65535
E..(d4@....<
c..>.fc....+....~.KP...%b........
03:11:14.410309 IP 10.99.4.12.pxc-roid > XX.XX.102.99.sieve: P 1:19(18) ack 1 win 65535
E..:dY@.....
c..>.fc....+....~.KP...F...GET / HTTP/1.0


03:11:14.410335 IP XX.XX.102.99.sieve > 10.99.4.12.pxc-roid: . ack 19 win 5840
E..(./@.@..A>.fc
c.......~.K+..0P.......
03:11:14.421344 IP XX.XX.102.99.sieve > 10.99.4.12.pxc-roid: R 1:1(0) ack 19 win 5840
E..(.0@.@..@>.fc
c.......~.K+..0P....|..
03:11:17.787105 IP 10.99.4.12.23837 > XX.XX.102.99.sieve: S 2:2(0) win 2048
E..(........
c..>.fc]...........P.............
03:11:17.787105 IP XX.XX.102.99.sieve > 10.99.4.12.23837: R 0:0(0) ack 3 win 0
E..(..@.@..q>.fc
c....].........P.......