first tcpdump attempt