more tcpdump data
tcptrace usage
tcpdump to find dup SYN