Your code works well for me:
192.168.0.69 -> 143.48.220.86 GET /~lstein/talks/WWW6/sniffer/ HTTP/ +1.1 192.168.0.69 -> 209.197.123.153 GET /?node_id=457321 HTTP/1.1 192.168.0.69 -> 209.197.123.153 GET /?node_id=234493 HTTP/1.1 192.168.0.69 -> 209.197.123.153 GET /?node_id=6182 HTTP/1.1 192.168.0.69 -> 209.197.123.153 GET /images/clearpixel.gif HTTP/1.1 192.168.0.69 -> 209.197.79.97 GET /i/pair-banner-current.gif HTTP/1. +1 192.168.0.69 -> 209.197.123.153 GET /images/dibona_sm.gif HTTP/1.1
I suspect there's something weird with your tcpdump. Could you post a sample output of /usr/sbin/tcpdump -lnx -s 1024 dst port 80?

Flavio (perl -e 'print(scalar(reverse("\nti.xittelop\@oivalf")))')

Don't fool yourself.

In reply to Re: converting tcpdump output by polettix
in thread converting tcpdump output by RnC

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post; it's "PerlMonks-approved HTML":