[root@poseidon adulau]# tcpdump not host 128.253.154.9 tcpdump: listening on eth0 19:36:26.555566 128.253.154.204.1167 > 128.253.154.201.telnet: S 962808623:962808623(0) win 32120 (DF) 19:36:26.556302 128.253.154.201.telnet > 128.253.154.204.1167: S 40373736:40373736(0) ack 962808624 win 10136 (DF) 19:36:26.556550 128.253.154.204.1167 > 128.253.154.201.telnet: . ack 1 win 32120 (DF) 19:36:26.559832 128.253.154.204.1167 > 128.253.154.201.telnet: P 1:28(27) ack 1 win 32120 (DF) 19:36:26.560132 128.253.154.201.telnet > 128.253.154.204.1167: . ack 28 win 10136 (DF) 19:36:26.662393 128.253.154.201.32806 > ns.lab-befree.be.domain: 4927+ (46) (DF)19:36:26.664440 ns.lab-befree.be.domain > 128.253.154.201.32806: 4927 NXDomain* 0/1/0 (127) 19:36:26.667741 128.253.154.201.telnet > 128.253.154.204.1167: P 1:16(15) ack 28 win 10136 (DF) 19:36:26.668008 128.253.154.204.1167 > 128.253.154.201.telnet: . ack 16 win 32120 (DF) 19:36:26.668245 128.253.154.204.1167 > 128.253.154.201.telnet: P 28:40(12) ack 16 win 32120 (DF) 19:36:26.668337 128.253.154.201.telnet > 128.253.154.204.1167: P 16:31(15) ack 28 win 10136 (DF)