= (  0 23:28:09.091264 163.1.236.180:47262-209.85.227.99:80) *AP     SEQ:4094724362 ACK:3316076611 1072b
  ====[23:28:09.091264] tcp session start [163.1.236.180:47262 -> 209.85.227.99:80]
    ==[23:28:09.091264] [Mono from   163.1.236.180:47262]  0.000000s,   1pkts,   1072b
  = (  1 23:28:09.119041 209.85.227.99:80-163.1.236.180:47262) *A      SEQ:3316076611 ACK:4094725434 1368b
  = (  2 23:28:09.119097 163.1.236.180:47262-209.85.227.99:80) _A

[......]

  ====[--:--:--.------] tcp session end [163.1.236.180:47263-209.85.227.99:80]