# tcpdump -i ppp0 src 46.4.24.48
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
14:22:33.369703 IP static.48.24.4.46.clients.your-server.de.pop3 > myip.4970: S 1537406926:1537406926(0) ack 274760254 win 5840 <mss 1460,nop,nop,sackOK>
14:22:33.508951 IP static.48.24.4.46.clients.your-server.de.pop3 > myip.4970: P 1:21(20) ack 1 win 5840
14:22:33.648443 IP static.48.24.4.46.clients.your-server.de.pop3 > myip.4970: . ack 26 win 5840
14:22:33.648457 IP static.48.24.4.46.clients.your-server.de.pop3 > myip.4970: P 21:26(5) ack 26 win 5840
14:22:33.802061 IP static.48.24.4.46.clients.your-server.de.pop3 > myip.4970: P 26:42(16) ack 41 win 5840
14:22:33.941688 IP static.48.24.4.46.clients.your-server.de.pop3 > myip.4970: P 42:54(12) ack 47 win 5840
14:22:34.081394 IP static.48.24.4.46.clients.your-server.de.pop3 > myip.4970: P 54:82(28) ack 53 win 5840
14:22:35.662307 IP static.48.24.4.46.clients.your-server.de.pop3 > myip.4970: . ack 61 win 5840 <nop,nop,sack 1 {53:61}>

tcpdump -i ppp0 dst 46.4.24.48
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
14:24:44.401517 IP myip.4970 > static.48.24.4.46.clients.your-server.de.pop3: F 274760314:274760314(0) ack 1537407008 win 65454
14:24:44.540697 IP myip.4970 > static.48.24.4.46.clients.your-server.de.pop3: . ack 1 win 65454 <nop,nop,sack 1 {2921:3519}>
14:24:48.727565 IP myip.4971 > static.48.24.4.46.clients.your-server.de.pop3: S 3166030284:3166030284(0) win 65535 <mss 1460,nop,nop,sackOK>
14:24:48.867362 IP myip..4971 > static.48.24.4.46.clients.your-server.de.pop3: . ack 1671315749 win 65535
14:24:49.006895 IP myip..4971 > static.48.24.4.46.clients.your-server.de.pop3: P 0:25(25) ack 21 win 65515
14:24:49.146203 IP myip..4971 > static.48.24.4.46.clients.your-server.de.pop3: P 25:40(15) ack 26 win 65510
14:24:49.294118 IP myip.4971 > static.48.24.4.46.clients.your-server.de.pop3: P 40:46(6) ack 42 win 65494
14:24:49.433133 IP myip.4971 > static.48.24.4.46.clients.your-server.de.pop3: P 46:52(6) ack 54 win 65482
14:24:49.572967 IP myip.4971 > static.48.24.4.46.clients.your-server.de.pop3: P 52:60(8) ack 82 win 65454
14:24:50.932680 IP myip.4971 > static.48.24.4.46.clients.your-server.de.pop3: P 52:60(8) ack 82 win 65454