root@OpenWrt:~# tcpdump -i eth1.1 -vn 'tcp portrange 20-21 or (tcp portrange 40000-50000 and host 10.0.0.100)'
tcpdump: listening on eth1.1, link-type EN10MB (Ethernet), capture size 262144 bytes
15:00:32.791589 IP (tos 0x28, ttl 105, id 12124, offset 0, flags [none], proto TCP (6), length 52)
    95.210.104.142.14006 > 10.0.0.100.46786: Flags [S], cksum 0xcd8d (correct), seq 3379240537, win 64240, options [mss 1352,nop,wscale 5,sackOK,eol], length 0
15:00:32.791967 IP (tos 0x28, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 40)
    10.0.0.100.46786 > 95.210.104.142.14006: Flags [R.], cksum 0x07ce (correct), seq 0, ack 3379240538, win 0, length 0
15:00:33.015760 IP (tos 0x0, ttl 47, id 53612, offset 0, flags [DF], proto TCP (6), length 60)
    37.161.219.6.8526 > 10.0.0.100.21: Flags [S], cksum 0xa092 (correct), seq 1562109601, win 65535, options [mss 1300,sackOK,TS val 1259469 ecr 0,nop,wscale 9], length 0
15:00:33.016187 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
    10.0.0.100.21 > 37.161.219.6.8526: Flags [S.], cksum 0x5737 (correct), seq 1289877394, ack 1562109602, win 65160, options [mss 1460,sackOK,TS val 1506913245 ecr 1259469,nop,wscale 7], length 0
15:00:33.352808 IP (tos 0x0, ttl 50, id 16088, offset 0, flags [DF], proto TCP (6), length 52)
    79.51.196.219.53974 > 10.0.0.100.46786: Flags [S], cksum 0xf99d (correct), seq 2376615125, win 64240, options [mss 1452,nop,wscale 8,nop,nop,sackOK], length 0
15:00:33.353216 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 40)
    10.0.0.100.46786 > 79.51.196.219.53974: Flags [R.], cksum 0x3546 (correct), seq 0, ack 2376615126, win 0, length 0
15:00:33.391580 IP (tos 0x28, ttl 105, id 48648, offset 0, flags [none], proto TCP (6), length 40)
    95.210.104.142.14006 > 10.0.0.100.46786: Flags [.], cksum 0xb580 (correct), ack 744653030, win 42180, length 0
15:00:33.391950 IP (tos 0x28, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 40)
    10.0.0.100.46786 > 95.210.104.142.14006: Flags [R], cksum 0x425b (correct), seq 744653030, win 0, length 0
15:00:34.033484 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
    10.0.0.100.21 > 37.161.219.6.8526: Flags [S.], cksum 0x533d (correct), seq 1289877394, ack 1562109602, win 65160, options [mss 1460,sackOK,TS val 1506914263 ecr 1259469,nop,wscale 7], length 0
15:00:34.043804 IP (tos 0x0, ttl 53, id 21745, offset 0, flags [DF], proto TCP (6), length 83)
    178.175.129.108.443 > 10.0.0.100.49556: Flags [P.], cksum 0x7b30 (correct), seq 2688443971:2688444002, ack 3468761747, win 74, options [nop,nop,TS val 1785121293 ecr 3730678020], length 31
15:00:34.044230 IP (tos 0x0, ttl 53, id 21746, offset 0, flags [DF], proto TCP (6), length 52)
    178.175.129.108.443 > 10.0.0.100.49556: Flags [F.], cksum 0xd0d6 (correct), seq 31, ack 1, win 74, options [nop,nop,TS val 1785121293 ecr 3730678020], length 0
15:00:34.072040 IP (tos 0x0, ttl 47, id 53613, offset 0, flags [DF], proto TCP (6), length 60)
    37.161.219.6.8526 > 10.0.0.100.21: Flags [S], cksum 0xa027 (correct), seq 1562109601, win 65535, options [mss 1300,sackOK,TS val 1259576 ecr 0,nop,wscale 9], length 0
15:00:34.072520 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
    10.0.0.100.21 > 37.161.219.6.8526: Flags [S.], cksum 0x5316 (correct), seq 1289877394, ack 1562109602, win 65160, options [mss 1460,sackOK,TS val 1506914302 ecr 1259469,nop,wscale 7], length 0
15:00:34.085442 IP (tos 0x0, ttl 64, id 80, offset 0, flags [DF], proto TCP (6), length 52)
    10.0.0.100.49556 > 178.175.129.108.443: Flags [.], cksum 0xaa0f (correct), ack 32, win 501, options [nop,nop,TS val 3730753055 ecr 1785121293], length 0
15:00:36.079134 IP (tos 0x0, ttl 47, id 53614, offset 0, flags [DF], proto TCP (6), length 60)
    37.161.219.6.8526 > 10.0.0.100.21: Flags [S], cksum 0x9f5f (correct), seq 1562109601, win 65535, options [mss 1300,sackOK,TS val 1259776 ecr 0,nop,wscale 9], length 0
15:00:36.079532 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
    10.0.0.100.21 > 37.161.219.6.8526: Flags [S.], cksum 0x4b3f (correct), seq 1289877394, ack 1562109602, win 65160, options [mss 1460,sackOK,TS val 1506916309 ecr 1259469,nop,wscale 7], length 0
^C
16 packets captured
16 packets received by filter
0 packets dropped by kernel