tcpdump
tcpdump: listening on eth0
08:44:36.552037 arp who-has 153.90.192.64 tell 153.90.199.254
08:44:36.563442 malt.cs.montana.edu.32779 > coesrv.coe.montana.edu.domain:  5154+ PTR? 64.192.90.153.in-addr.arpa. (44) (DF)
08:44:36.571279 arp who-has 153.90.192.64 tell coesrv.coe.montana.edu
08:44:36.640909 0.192.75.254 > 0.0.nis: nbp-lkup 160: "=:NRL@Chemistry" [addr=0.192.234.254]
08:44:36.704280 arp who-has btclab04.msu.montana.edu tell wapep353.cs.montana.edu
08:44:37.054169 0:8:2:0:de:d8 > 3:0:c7:0:0:ee snap test/P len=63
08:44:37.084238 arp who-has wtisrv.coe.montana.edu tell wapep353.cs.montana.edu
08:44:37.084289 arp who-has dkack2k.coe.montana.edu tell wapep353.cs.montana.edu
08:44:37.089209 f1d55429.00:30:c1:ab:e9:90.452 > f1d55429.ff:ff:ff:ff:ff:ff.452:ipx-sap-resp[|ipx 64]
08:44:37.330497 arp who-has smtsrv.eps.montana.edu tell wapep353.cs.montana.edu
08:44:37.330551 arp who-has cim_ws1.coe.montana.edu tell wapep353.cs.montana.edu
08:44:37.330740 arp who-has 153.90.193.255 tell bede.physics.montana.edu
08:44:37.331306 arp who-has cim_ws1.coe.montana.edu tell wapep353.cs.montana.edu
08:44:37.372087 arp who-has annec.coe.montana.edu tell wapep353.cs.montana.edu
08:44:37.416739 0:4:dd:28:12:82 > 1:0:c:dd:dd:dd snap ui/C len=35

tcpdump dst 153.90.199.78
tcpdump: listening on eth0
08:21:51.673976 malt.cs.montana.edu > hops.cs.montana.edu: icmp: echo reply
08:21:51.674222 arp who-has hops.cs.montana.edu tell wapep353.cs.montana.edu
08:21:51.674566 arp who-has hops.cs.montana.edu tell wapep353.cs.montana.edu
08:21:52.685175 malt.cs.montana.edu > hops.cs.montana.edu: icmp: echo reply
08:21:52.685474 malt.cs.montana.edu > hops.cs.montana.edu: icmp: echo reply
08:21:57.682510 arp who-has hops.cs.montana.edu tell malt.cs.montana.edu
08:22:05.245525 malt.cs.montana.edu.ssh > hops.cs.montana.edu.35968: S 2639618472:2639618472(0) ack 1281028961 win 5792  (DF)
08:22:05.246841 malt.cs.montana.edu.ssh > hops.cs.montana.edu.35968: . ack 1 win 5792  (DF)
08:22:05.248898 malt.cs.montana.edu.ssh > hops.cs.montana.edu.35968: P 1:24(23) ack 1 win 5792  (DF)
08:22:05.250803 malt.cs.montana.edu.ssh > hops.cs.montana.edu.35968: . ack 25 win 5792  (DF)
08:22:05.250814 malt.cs.montana.edu.ssh > hops.cs.montana.edu.35968: . ack 25 win 5792  (DF)
08:22:05.250829 malt.cs.montana.edu.ssh > hops.cs.montana.edu.35968: . ack 25 win 5792  (DF)
08:22:05.251073 malt.cs.montana.edu.ssh > hops.cs.montana.edu.35968: . ack 569 win 6528  (DF)
50 packets received by filter


tcpdump  src host 153.90.199.78 port 22and port 22
tcpdump: listening on eth0
08:42:16.553328 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: S 2544711799:2544711799(0) win 5840  (DF)
08:42:16.553487 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 3908995333 win 5840  (DF)
08:42:16.554436 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1 win 5840  (DF)
08:42:16.555574 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1 win 5840  (DF)
08:42:16.586371 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 24 win 5840  (DF)
08:42:16.586394 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 24 win 5840  (DF)
08:42:16.586536 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 0:24(24) ack 24 win 5840  (DF)
08:42:16.586702 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 24 win 5840  (DF)
08:42:16.586953 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 24 win 5840  (DF)
08:42:16.587120 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 24:568(544) ack 24 win 5840  (DF)
08:42:16.587200 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 0:24(24) ack 24 win 5840  (DF)
08:42:16.587959 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 24:568(544) ack 24 win 5840  (DF)
08:42:16.588690 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 568:592(24) ack 568 win 6528  (DF)
08:42:16.588737 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 568 win 6528  (DF)
08:42:16.589028 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 568 win 6528  (DF)
08:42:16.589171 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 568:592(24) ack 568 win 6528  (DF)
08:42:16.589391 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 568 win 6528  (DF)
08:42:16.589582 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 568 win 6528  (DF)
08:42:16.591664 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 992 win 7616  (DF)
08:42:16.592003 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 992 win 7616  (DF)
08:42:16.592472 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 992 win 7616  (DF)
08:42:16.592612 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 992 win 7616  (DF)
08:42:16.613395 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 592:1008(416) ack 992 win 7616  (DF)
08:42:16.613677 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 592:1008(416) ack 992 win 7616  (DF)
08:42:16.696949 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1728 win 8832  (DF)
08:42:16.697215 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1728 win 8832  (DF)
08:42:16.724902 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 1008:1024(16) ack 1728 win 8832  (DF)
08:42:16.725068 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 1024:1072(48) ack 1728 win 8832  (DF)
08:42:16.725241 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 1008:1024(16) ack 1728 win 8832  (DF)
08:42:16.725673 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 1024:1072(48) ack 1728 win 8832  (DF)
08:42:16.727978 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 1072:1136(64) ack 1776 win 8832  (DF)
08:42:16.728037 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1776 win 8832  (DF)
08:42:16.728257 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 1072:1136(64) ack 1776 win 8832  (DF)
08:42:16.728470 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1776 win 8832  (DF)
08:42:16.745419 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1856 win 8832  (DF)
08:42:16.745619 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 1136:1232(96) ack 1856 win 8832  (DF)
08:42:16.745765 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1856 win 8832  (DF)
08:42:16.746257 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1856 win 8832  (DF)
08:42:16.746440 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: P 1136:1232(96) ack 1856 win 8832  (DF)
08:42:16.746444 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1856 win 8832  (DF)
08:42:16.746462 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1936 win 8832  (DF)
08:42:16.746789 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1936 win 8832  (DF)
08:42:16.747172 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1936 win 8832  (DF)
08:42:16.747532 hops.cs.montana.edu.36010 > malt.cs.montana.edu.ssh: . ack 1936 win 8832  (DF)

44 packets received by filter
0 packets dropped by kernel