Вот вывод tcpdump:
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
06:35:04.450380 IP 10.194.2.10.1036 > 152.19.134.40.80: F 2769007903:2769007903(0) ack 528485047 win 15752 <nop,nop,timestamp 181597 2532106942>
06:35:04.657555 IP 152.19.134.40.80 > 10.194.2.10.1036: . ack 1 win 122 <nop,nop,timestamp 2532159132 181597>
06:35:19.989755 IP 10.194.2.10.1024 > 10.194.1.10.53: 2+ A? lists.ibiblio.org. (35)
06:35:20.061319 IP 10.194.1.10.53 > 10.194.2.10.1024: 2 1/6/12 A 152.19.134.8 (453)
06:35:20.119864 IP 10.194.2.10.1037 > 152.19.134.8.80: S 2868437305:2868437305(0) win 15752 <mss 1432,sackOK,timestamp 183165 0,nop,wscale 0>
06:35:20.281788 IP 152.19.134.8.80 > 10.194.2.10.1037: S 2217418925:2217418925(0) ack 2868437306 win 14480 <mss 1432,sackOK,timestamp 3040479011 183165,nop,wscale 7>
06:35:20.330011 IP 10.194.2.10.1037 > 152.19.134.8.80: . ack 1 win 15752 <nop,nop,timestamp 183186 3040479011>
06:35:20.330374 IP 10.194.2.10.1037 > 152.19.134.8.80: P 1:203(202) ack 1 win 15752 <nop,nop,timestamp 183186 3040479011>
06:35:20.491541 IP 152.19.134.8.80 > 10.194.2.10.1037: . ack 203 win 122 <nop,nop,timestamp 3040479221 183186>
06:35:20.618261 IP 152.19.134.8.80 > 10.194.2.10.1037: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040479347 183186>
06:35:20.622193 IP 152.19.134.8.80 > 10.194.2.10.1037: . 1421:2841(1420) ack 203 win 122 <nop,nop,timestamp 3040479347 183186>
06:35:20.625938 IP 152.19.134.8.80 > 10.194.2.10.1037: P 2841:4239(1398) ack 203 win 122 <nop,nop,timestamp 3040479347 183186>
06:35:20.630877 IP 152.19.134.8.80 > 10.194.2.10.1037: . 4239:5659(1420) ack 203 win 122 <nop,nop,timestamp 3040479359 183186>
06:35:20.634927 IP 152.19.134.8.80 > 10.194.2.10.1037: P 5659:6207(548) ack 203 win 122 <nop,nop,timestamp 3040479359 183186>
06:35:20.636511 IP 152.19.134.8.80 > 10.194.2.10.1037: P 6207:6212(5) ack 203 win 122 <nop,nop,timestamp 3040479361 183186>
06:35:20.636684 IP 152.19.134.8.80 > 10.194.2.10.1037: F 6212:6212(0) ack 203 win 122 <nop,nop,timestamp 3040479361 183186>
06:35:20.819796 IP 10.194.2.10.1037 > 152.19.134.8.80: . ack 1 win 15752 <nop,nop,timestamp 183234 3040479221,nop,nop,sack sack 1 {6212:6213} >
06:35:20.981800 IP 152.19.134.8.80 > 10.194.2.10.1037: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040479710 183234>
06:35:20.985732 IP 152.19.134.8.80 > 10.194.2.10.1037: . 1421:2841(1420) ack 203 win 122 <nop,nop,timestamp 3040479710 183234>
06:35:21.611306 IP 152.19.134.8.80 > 10.194.2.10.1037: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040480340 183234>
06:35:22.871312 IP 152.19.134.8.80 > 10.194.2.10.1037: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040481600 183234>
06:35:25.391388 IP 152.19.134.8.80 > 10.194.2.10.1037: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040484120 183234>
06:35:30.431418 IP 152.19.134.8.80 > 10.194.2.10.1037: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040489160 183234>
06:35:36.129607 IP 152.19.134.40.80 > 10.194.2.10.1036: . 1:1421(1420) ack 1 win 122 <nop,nop,timestamp 2532190603 181597>
06:35:36.179801 IP 10.194.2.10.1036 > 152.19.134.40.80: R 2769007904:2769007904(0) win 0
06:35:40.511584 IP 152.19.134.8.80 > 10.194.2.10.1037: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040499240 183234>
06:36:00.671909 IP 152.19.134.8.80 > 10.194.2.10.1037: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040519400 183234>
06:36:40.992299 IP 152.19.134.8.80 > 10.194.2.10.1037: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040559720 183234>
06:37:20.349760 IP 10.194.2.10.1037 > 152.19.134.8.80: F 203:203(0) ack 1 win 15752 <nop,nop,timestamp 195187 3040479221,nop,nop,sack sack 1 {6212:6213} >
06:37:20.349771 IP 10.194.2.10.1038 > 152.19.134.8.80: S 2990733992:2990733992(0) win 15752 <mss 1432,sackOK,timestamp 195187 0,nop,wscale 0>
06:37:20.510777 IP 152.19.134.8.80 > 10.194.2.10.1037: . ack 204 win 122 <nop,nop,timestamp 3040599239 195187>
06:37:20.515322 IP 152.19.134.8.80 > 10.194.2.10.1038: S 3702394353:3702394353(0) ack 2990733993 win 14480 <mss 1432,sackOK,timestamp 3040599239 195187,nop,wscale 7>
06:37:20.559755 IP 10.194.2.10.1038 > 152.19.134.8.80: . ack 1 win 15752 <nop,nop,timestamp 195208 3040599239>
06:37:20.559777 IP 10.194.2.10.1038 > 152.19.134.8.80: P 1:203(202) ack 1 win 15752 <nop,nop,timestamp 195208 3040599239>
06:37:20.725974 IP 152.19.134.8.80 > 10.194.2.10.1038: . ack 203 win 122 <nop,nop,timestamp 3040599450 195208>
06:37:20.881033 IP 152.19.134.8.80 > 10.194.2.10.1038: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040599603 195208>
06:37:20.884979 IP 152.19.134.8.80 > 10.194.2.10.1038: . 1421:2841(1420) ack 203 win 122 <nop,nop,timestamp 3040599603 195208>
06:37:20.888785 IP 152.19.134.8.80 > 10.194.2.10.1038: P 2841:4239(1398) ack 203 win 122 <nop,nop,timestamp 3040599603 195208>
06:37:20.893053 IP 152.19.134.8.80 > 10.194.2.10.1038: . 4239:5659(1420) ack 203 win 122 <nop,nop,timestamp 3040599613 195208>
06:37:20.896949 IP 152.19.134.8.80 > 10.194.2.10.1038: P 5659:6207(548) ack 203 win 122 <nop,nop,timestamp 3040599613 195208>
06:37:20.898492 IP 152.19.134.8.80 > 10.194.2.10.1038: P 6207:6212(5) ack 203 win 122 <nop,nop,timestamp 3040599614 195208>
06:37:20.898660 IP 152.19.134.8.80 > 10.194.2.10.1038: F 6212:6212(0) ack 203 win 122 <nop,nop,timestamp 3040599614 195208>
06:37:21.512676 IP 152.19.134.8.80 > 10.194.2.10.1038: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040600236 195208>
06:37:22.778799 IP 152.19.134.8.80 > 10.194.2.10.1038: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040601502 195208>
06:37:25.310881 IP 152.19.134.8.80 > 10.194.2.10.1038: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040604034 195208>
06:37:30.374864 IP 152.19.134.8.80 > 10.194.2.10.1038: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040609098 195208>
06:37:40.503083 IP 152.19.134.8.80 > 10.194.2.10.1038: . 1:1421(1420) ack 203 win 122 <nop,nop,timestamp 3040619226 195208>
