tcpdump -pleni eth0 port 2965 and host 84.225.254.70
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes



16:20:08.042903 00:50:56:a3:4f:df > 00:1d:70:09:d0:cf, ethertype IPv4 (0x0800), length 74: 10.11.9.189.39887 > 84.225.254.70.2965: S 827718070:827718070(0) win 14600 <mss 1460,sackOK,timestamp 42794475 0,nop,wscale 7>
16:20:08.043400 00:1d:70:09:d0:cf > 00:50:56:a3:4f:df, ethertype IPv4 (0x0800), length 66: 84.225.254.70.2965 > 10.11.9.189.39887: S 450300443:450300443(0) ack 827718071 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 7>
16:20:08.043419 00:50:56:a3:4f:df > 00:1d:70:09:d0:cf, ethertype IPv4 (0x0800), length 54: 10.11.9.189.39887 > 84.225.254.70.2965: . ack 1 win 115
16:20:08.043732 00:50:56:a3:4f:df > 00:1d:70:09:d0:cf, ethertype IPv4 (0x0800), length 109: 10.11.9.189.39887 > 84.225.254.70.2965: P 1:56(55) ack 1 win 115
16:20:08.044428 00:1d:70:09:d0:cf > 00:50:56:a3:4f:df, ethertype IPv4 (0x0800), length 60: 84.225.254.70.2965 > 10.11.9.189.39887: . ack 56 win 46
16:20:10.056941 00:1d:70:09:d0:cf > 00:50:56:a3:4f:df, ethertype IPv4 (0x0800), length 100: 84.225.254.70.2965 > 10.11.9.189.39887: P 1:47(46) ack 56 win 46
16:20:10.056993 00:50:56:a3:4f:df > 00:1d:70:09:d0:cf, ethertype IPv4 (0x0800), length 54: 10.11.9.189.39887 > 84.225.254.70.2965: . ack 47 win 115
16:20:10.059686 00:1d:70:09:d0:cf > 00:50:56:a3:4f:df, ethertype IPv4 (0x0800), length 60: 84.225.254.70.2965 > 10.11.9.189.39887: P 47:48(1) ack 56 win 46
16:20:10.059767 00:50:56:a3:4f:df > 00:1d:70:09:d0:cf, ethertype IPv4 (0x0800), length 54: 10.11.9.189.39887 > 84.225.254.70.2965: . ack 48 win 115
16:20:25.060171 00:50:56:a3:4f:df > 00:1d:70:09:d0:cf, ethertype IPv4 (0x0800), length 54: 10.11.9.189.39887 > 84.225.254.70.2965: F 56:56(0) ack 48 win 115
16:20:25.060866 00:1d:70:09:d0:cf > 00:50:56:a3:4f:df, ethertype IPv4 (0x0800), length 60: 84.225.254.70.2965 > 10.11.9.189.39887: F 48:48(0) ack 57 win 46
16:20:25.060890 00:50:56:a3:4f:df > 00:1d:70:09:d0:cf, ethertype IPv4 (0x0800), length 54: 10.11.9.189.39887 > 84.225.254.70.2965: . ack 49 win 115