[root@yyjk ~/sbin/socket]#tcpdump -i eth0 '((tcp) and ((tcp port 18080) ))'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
19:44:45.999022 IP 99.5.101.53.36745 > yyjk.18080: Flags [S], seq 217760956, win 14600, options [mss 1460,sackOK,TS val 3943822317 ecr 0,nop,wscale 7], length 0
19:44:45.999034 IP yyjk.18080 > 99.5.101.53.36745: Flags [S.], seq 4157093116, ack 217760957, win 14480, options [mss 1460,sackOK,TS val 3026157098 ecr 3943822317,nop,wscale 7], length 0
19:44:45.999188 IP 99.5.101.53.36745 > yyjk.18080: Flags [.], ack 1, win 115, options [nop,nop,TS val 3943822317 ecr 3026157098], length 0
19:44:45.999330 IP 99.5.101.53.36745 > yyjk.18080: Flags [F.], seq 1, ack 1, win 115, options [nop,nop,TS val 3943822317 ecr 3026157098], length 0
19:44:45.999405 IP yyjk.18080 > 99.5.101.53.36745: Flags [F.]