(eth type=0x0800
 (ipv4 src=1.1.1.1 dst=1.1.1.2 
  id=2 prot = 6 csum=0
  (tcp src=1234 syn seqno=1 ackno=0)))