С моего компа:

root@border:/usr/local/www/apache24/data # tcpdump -nni vlan9 host 91.230.25.72
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vlan9, link-type EN10MB (Ethernet), capture size 262144 bytes
20:15:28.282881 IP 109.248.219.10.63574 > 91.230.25.72.80: Flags [S], seq 1052051754, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
20:15:28.308388 IP 91.230.25.72.80 > 109.248.219.10.63574: Flags [S.], seq 1769569430, ack 1052051755, win 65535, options [mss 1460,nop,wscale 6,sackOK,eol], length 0
20:15:28.309381 IP 109.248.219.10.63574 > 91.230.25.72.80: Flags [.], ack 1, win 1026, length 0
20:15:28.309929 IP 109.248.219.10.63574 > 91.230.25.72.80: Flags [P.], seq 1:455, ack 1, win 1026, length 454: HTTP: GET /RELEASE HTTP/1.1
20:15:28.337830 IP 91.230.25.72.80 > 109.248.219.10.63574: Flags [P.], seq 1:226, ack 455, win 1026, length 225: HTTP: HTTP/1.1 200 OK
20:15:28.380252 IP 109.248.219.10.63574 > 91.230.25.72.80: Flags [.], ack 226, win 1025, length 0
20:15:28.702889 IP 109.248.219.10.63574 > 91.230.25.72.80: Flags [P.], seq 455:853, ack 226, win 1025, length 398: HTTP: GET /favicon.ico HTTP/1.1
20:15:28.730653 IP 91.230.25.72.80 > 109.248.219.10.63574: Flags [P.], seq 226:610, ack 853, win 1026, length 384: HTTP: HTTP/1.1 404 Not Found
20:15:28.785134 IP 109.248.219.10.63574 > 91.230.25.72.80: Flags [.], ack 610, win 1024, length 0
20:16:13.736764 IP 109.248.219.10.63574 > 91.230.25.72.80: Flags [.], seq 852:853, ack 610, win 1024, length 1: HTTP
20:16:13.763073 IP 91.230.25.72.80 > 109.248.219.10.63574: Flags [.], ack 853, win 1026, length 0

=========================================================================

C NAS-а:

20:16:37.429745 IP 109.248.219.1.45905 > 91.230.25.72.80: Flags [S], seq 1539901973, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2480386951 ecr 0], length 0
20:16:37.455675 IP 91.230.25.72.80 > 109.248.219.1.45905: Flags [S.], seq 3476433209, ack 1539901974, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 912727603 ecr 2480386951], length 0
20:16:38.429486 IP 109.248.219.1.45905 > 91.230.25.72.80: Flags [S], seq 1539901973, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2480387951 ecr 0], length 0
20:16:38.454825 IP 91.230.25.72.80 > 109.248.219.1.45905: Flags [S.], seq 3476433209, ack 1539901974, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 912728603 ecr 2480387951], length 0
20:16:40.629496 IP 109.248.219.1.45905 > 91.230.25.72.80: Flags [S], seq 1539901973, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2480390151 ecr 0], length 0
20:16:40.654865 IP 91.230.25.72.80 > 109.248.219.1.45905: Flags [S.], seq 3476433209, ack 1539901974, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 912730803 ecr 2480390151], length 0
20:16:43.654456 IP 91.230.25.72.80 > 109.248.219.1.45905: Flags [S.], seq 3476433209, ack 1539901974, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 912733803 ecr 2480390151], length 0
20:16:43.730815 IP 91.230.25.72.80 > 109.248.219.10.63574: Flags [F.], seq 610, ack 853, win 1026, length 0
20:16:43.731532 IP 109.248.219.10.63574 > 91.230.25.72.80: Flags [.], ack 611, win 1024, length 0
20:16:44.829486 IP 109.248.219.1.45905 > 91.230.25.72.80: Flags [S], seq 1539901973, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2480394351 ecr 0], length 0
20:16:44.855096 IP 91.230.25.72.80 > 109.248.219.1.45905: Flags [S.], seq 3476433209, ack 1539901974, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 912735003 ecr 2480394351], length 0
20:16:47.854458 IP 91.230.25.72.80 > 109.248.219.1.45905: Flags [S.], seq 3476433209, ack 1539901974, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 912738003 ecr 2480394351], length 0
^C
23 packets captured
8825682 packets received by filter
0 packets dropped by kernel