found this article while looking for how to filter out only rst packets, some very cool tcpdump recipes http://acs.lbl.gov/~jason/tcpdump_advanced_filters.txt