doug@doug-64:~/tcpdump/047$ tcpdump -tttt -nn -vvv -r eth1-2012-06-19-15-57-01.bin host 195.214.79.22
reading from file eth1-2012-06-19-15-57-01.bin, link-type EN10MB (Ethernet)
2012-06-19 16:01:38.297855 IP (tos 0x0, ttl 48, id 10265, offset 0, flags [DF], proto TCP (6), length 60)
    195.214.79.22.50212 > 173.180.45.4.80: Flags [S], cksum 0x6b7e (correct), seq 2944140976, win 5840, options [mss 1460,sackOK,TS val 784346793 ecr 0,nop,wscale 9], length 0
2012-06-19 16:01:38.297964 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
    173.180.45.4.80 > 195.214.79.22.50212: Flags [S.], cksum 0xe224 (correct), seq 1389830353, ack 2944140977, win 5792, options [mss 1460,sackOK,TS val 595849806 ecr 784346793,nop,wscale 7], length 0
2012-06-19 16:01:38.521297 IP (tos 0x0, ttl 48, id 10266, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.50212 > 173.180.45.4.80: Flags [.], cksum 0x274b (correct), seq 1, ack 1, win 12, options [nop,nop,TS val 784346851 ecr 595849806], length 0
2012-06-19 16:01:38.522285 IP (tos 0x0, ttl 48, id 10267, offset 0, flags [DF], proto TCP (6), length 237)
    195.214.79.22.50212 > 173.180.45.4.80: Flags [P.], cksum 0x8805 (correct), seq 1:186, ack 1, win 12, options [nop,nop,TS val 784346851 ecr 595849806], length 185
2012-06-19 16:01:38.522321 IP (tos 0x0, ttl 64, id 53943, offset 0, flags [DF], proto TCP (6), length 52)
    173.180.45.4.80 > 195.214.79.22.50212: Flags [.], cksum 0x2651 (correct), seq 1, ack 186, win 54, options [nop,nop,TS val 595849829 ecr 784346851], length 0
2012-06-19 16:01:38.522679 IP (tos 0x0, ttl 64, id 53944, offset 0, flags [DF], proto TCP (6), length 1500)
    173.180.45.4.80 > 195.214.79.22.50212: Flags [.], cksum 0xa371 (correct), seq 1:1449, ack 186, win 54, options [nop,nop,TS val 595849829 ecr 784346851], length 1448
2012-06-19 16:01:38.522692 IP (tos 0x0, ttl 64, id 53945, offset 0, flags [DF], proto TCP (6), length 1500)
    173.180.45.4.80 > 195.214.79.22.50212: Flags [.], cksum 0x64fe (correct), seq 1449:2897, ack 186, win 54, options [nop,nop,TS val 595849829 ecr 784346851], length 1448
2012-06-19 16:01:38.522705 IP (tos 0x0, ttl 64, id 53946, offset 0, flags [DF], proto TCP (6), length 1500)
    173.180.45.4.80 > 195.214.79.22.50212: Flags [P.], cksum 0xff43 (correct), seq 2897:4345, ack 186, win 54, options [nop,nop,TS val 595849829 ecr 784346851], length 1448
2012-06-19 16:01:38.786167 IP (tos 0x0, ttl 48, id 10268, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.50212 > 173.180.45.4.80: Flags [.], cksum 0x208e (correct), seq 186, ack 1449, win 18, options [nop,nop,TS val 784346914 ecr 595849829], length 0
2012-06-19 16:01:38.786196 IP (tos 0x0, ttl 64, id 53947, offset 0, flags [DF], proto TCP (6), length 1325)
    173.180.45.4.80 > 195.214.79.22.50212: Flags [P.], cksum 0x2072 (correct), seq 4345:5618, ack 186, win 54, options [nop,nop,TS val 595849855 ecr 784346914], length 1273
2012-06-19 16:01:38.795253 IP (tos 0x0, ttl 48, id 10269, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.50212 > 173.180.45.4.80: Flags [.], cksum 0x1ade (correct), seq 186, ack 2897, win 23, options [nop,nop,TS val 784346917 ecr 595849829], length 0
2012-06-19 16:01:38.802915 IP (tos 0x0, ttl 48, id 10270, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.50212 > 173.180.45.4.80: Flags [.], cksum 0x152d (correct), seq 186, ack 4345, win 29, options [nop,nop,TS val 784346920 ecr 595849829], length 0
2012-06-19 16:01:39.024445 IP (tos 0x0, ttl 48, id 10271, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.50212 > 173.180.45.4.80: Flags [.], cksum 0x0fdb (correct), seq 186, ack 5618, win 35, options [nop,nop,TS val 784346977 ecr 595849855], length 0
2012-06-19 16:01:39.026390 IP (tos 0x0, ttl 48, id 10272, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.50212 > 173.180.45.4.80: Flags [F.], cksum 0x0fda (correct), seq 186, ack 5618, win 35, options [nop,nop,TS val 784346977 ecr 595849855], length 0
2012-06-19 16:01:39.026461 IP (tos 0x0, ttl 64, id 53948, offset 0, flags [DF], proto TCP (6), length 52)
    173.180.45.4.80 > 195.214.79.22.50212: Flags [F.], cksum 0x0fae (correct), seq 5618, ack 187, win 54, options [nop,nop,TS val 595849879 ecr 784346977], length 0
2012-06-19 16:01:39.263192 IP (tos 0x0, ttl 48, id 10273, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.50212 > 173.180.45.4.80: Flags [.], cksum 0x0f89 (correct), seq 187, ack 5619, win 35, options [nop,nop,TS val 784347033 ecr 595849879], length 0

doug@doug-64:~/tcpdump/047$ tcpdump -tttt -nn -vvv -r eth1-2012-06-19-16-07-01.bin host 195.214.79.22
reading from file eth1-2012-06-19-16-07-01.bin, link-type EN10MB (Ethernet)
2012-06-19 16:14:23.713930 IP (tos 0x0, ttl 48, id 51104, offset 0, flags [DF], proto TCP (6), length 60)
    195.214.79.22.42575 > 173.180.45.4.80: Flags [S], cksum 0xfa8e (correct), seq 2076499385, win 5840, options [mss 1460,sackOK,TS val 784538137 ecr 0,nop,wscale 9], length 0
2012-06-19 16:14:23.714033 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
    173.180.45.4.80 > 195.214.79.22.42575: Flags [S.], cksum 0xceb0 (correct), seq 1580174590, ack 2076499386, win 5792, options [mss 1460,sackOK,TS val 595926348 ecr 784538137,nop,wscale 7], length 0
2012-06-19 16:14:23.955113 IP (tos 0x0, ttl 48, id 51105, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.42575 > 173.180.45.4.80: Flags [.], cksum 0x13d6 (correct), seq 1, ack 1, win 12, options [nop,nop,TS val 784538196 ecr 595926348], length 0
2012-06-19 16:14:23.957589 IP (tos 0x0, ttl 48, id 51106, offset 0, flags [DF], proto TCP (6), length 230)
    195.214.79.22.42575 > 173.180.45.4.80: Flags [P.], cksum 0x31dd (correct), seq 1:179, ack 1, win 12, options [nop,nop,TS val 784538196 ecr 595926348], length 178
2012-06-19 16:14:23.957623 IP (tos 0x0, ttl 64, id 37275, offset 0, flags [DF], proto TCP (6), length 52)
    173.180.45.4.80 > 195.214.79.22.42575: Flags [.], cksum 0x12e2 (correct), seq 1, ack 179, win 54, options [nop,nop,TS val 595926372 ecr 784538196], length 0
2012-06-19 16:14:23.957939 IP (tos 0x0, ttl 64, id 37276, offset 0, flags [DF], proto TCP (6), length 332)
    173.180.45.4.80 > 195.214.79.22.42575: Flags [P.], cksum 0x3f4b (correct), seq 1:281, ack 179, win 54, options [nop,nop,TS val 595926372 ecr 784538196], length 280
2012-06-19 16:14:23.958008 IP (tos 0x0, ttl 64, id 37277, offset 0, flags [DF], proto TCP (6), length 52)
    173.180.45.4.80 > 195.214.79.22.42575: Flags [F.], cksum 0x11c9 (correct), seq 281, ack 179, win 54, options [nop,nop,TS val 595926372 ecr 784538196], length 0
2012-06-19 16:14:24.202991 IP (tos 0x0, ttl 48, id 51107, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.42575 > 173.180.45.4.80: Flags [.], cksum 0x11b5 (correct), seq 179, ack 281, win 14, options [nop,nop,TS val 784538257 ecr 595926372], length 0
2012-06-19 16:14:24.203439 IP (tos 0x0, ttl 48, id 51108, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.42575 > 173.180.45.4.80: Flags [F.], cksum 0x11b3 (correct), seq 179, ack 282, win 14, options [nop,nop,TS val 784538257 ecr 595926372], length 0
2012-06-19 16:14:24.203461 IP (tos 0x0, ttl 64, id 37278, offset 0, flags [DF], proto TCP (6), length 52)
    173.180.45.4.80 > 195.214.79.22.42575: Flags [.], cksum 0x1172 (correct), seq 282, ack 180, win 54, options [nop,nop,TS val 595926397 ecr 784538257], length 0
2012-06-19 16:14:24.246817 IP (tos 0x0, ttl 48, id 2854, offset 0, flags [DF], proto TCP (6), length 60)
    195.214.79.22.42576 > 173.180.45.4.80: Flags [S], cksum 0xc57d (correct), seq 2085556667, win 5840, options [mss 1460,sackOK,TS val 784538269 ecr 0,nop,wscale 9], length 0
2012-06-19 16:14:24.246895 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
    173.180.45.4.80 > 195.214.79.22.42576: Flags [S.], cksum 0x83a8 (correct), seq 3855751965, ack 2085556668, win 5792, options [mss 1460,sackOK,TS val 595926401 ecr 784538269,nop,wscale 7], length 0
2012-06-19 16:14:24.487412 IP (tos 0x0, ttl 48, id 2855, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.42576 > 173.180.45.4.80: Flags [.], cksum 0xc8cd (correct), seq 1, ack 1, win 12, options [nop,nop,TS val 784538328 ecr 595926401], length 0
2012-06-19 16:14:24.496959 IP (tos 0x0, ttl 48, id 2856, offset 0, flags [DF], proto TCP (6), length 229)
    195.214.79.22.42576 > 173.180.45.4.80: Flags [P.], cksum 0x7773 (correct), seq 1:178, ack 1, win 12, options [nop,nop,TS val 784538332 ecr 595926401], length 177
2012-06-19 16:14:24.496986 IP (tos 0x0, ttl 64, id 1668, offset 0, flags [DF], proto TCP (6), length 52)
    173.180.45.4.80 > 195.214.79.22.42576: Flags [.], cksum 0xc7d5 (correct), seq 1, ack 178, win 54, options [nop,nop,TS val 595926426 ecr 784538332], length 0
2012-06-19 16:14:24.497233 IP (tos 0x0, ttl 64, id 1669, offset 0, flags [DF], proto TCP (6), length 1500)
    173.180.45.4.80 > 195.214.79.22.42576: Flags [.], cksum 0x1887 (correct), seq 1:1449, ack 178, win 54, options [nop,nop,TS val 595926426 ecr 784538332], length 1448
2012-06-19 16:14:24.497245 IP (tos 0x0, ttl 64, id 1670, offset 0, flags [DF], proto TCP (6), length 1500)
    173.180.45.4.80 > 195.214.79.22.42576: Flags [.], cksum 0xce3b (correct), seq 1449:2897, ack 178, win 54, options [nop,nop,TS val 595926426 ecr 784538332], length 1448
2012-06-19 16:14:24.497258 IP (tos 0x0, ttl 64, id 1671, offset 0, flags [DF], proto TCP (6), length 1500)
    173.180.45.4.80 > 195.214.79.22.42576: Flags [P.], cksum 0x85a9 (correct), seq 2897:4345, ack 178, win 54, options [nop,nop,TS val 595926426 ecr 784538332], length 1448
2012-06-19 16:14:24.497309 IP (tos 0x0, ttl 64, id 1672, offset 0, flags [DF], proto TCP (6), length 1287)
    173.180.45.4.80 > 195.214.79.22.42576: Flags [FP.], cksum 0x60e3 (correct), seq 4345:5580, ack 178, win 54, options [nop,nop,TS val 595926426 ecr 784538332], length 1235
2012-06-19 16:14:24.757140 IP (tos 0x0, ttl 48, id 2857, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.42576 > 173.180.45.4.80: Flags [.], cksum 0xc212 (correct), seq 178, ack 1449, win 18, options [nop,nop,TS val 784538395 ecr 595926426], length 0
2012-06-19 16:14:24.768173 IP (tos 0x0, ttl 48, id 2858, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.42576 > 173.180.45.4.80: Flags [.], cksum 0xbc62 (correct), seq 178, ack 2897, win 23, options [nop,nop,TS val 784538398 ecr 595926426], length 0
2012-06-19 16:14:24.785184 IP (tos 0x0, ttl 48, id 2859, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.42576 > 173.180.45.4.80: Flags [.], cksum 0xb6ae (correct), seq 178, ack 4345, win 29, options [nop,nop,TS val 784538404 ecr 595926426], length 0
2012-06-19 16:14:24.798248 IP (tos 0x0, ttl 48, id 2860, offset 0, flags [DF], proto TCP (6), length 52)
    195.214.79.22.42576 > 173.180.45.4.80: Flags [F.], cksum 0xb1d0 (correct), seq 178, ack 5581, win 35, options [nop,nop,TS val 784538407 ecr 595926426], length 0
2012-06-19 16:14:24.798272 IP (tos 0x0, ttl 64, id 1673, offset 0, flags [DF], proto TCP (6), length 52)
    173.180.45.4.80 > 195.214.79.22.42576: Flags [.], cksum 0xb19f (correct), seq 5581, ack 179, win 54, options [nop,nop,TS val 595926456 ecr 784538407], length 0