I'm doing a tcpdump on my Linux. I have found this casuality:
21:43:25.369692 AA.health-polling > myhostN1.http: S 755173640:755173640(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
21:43:25.380730 myhostN1.http > AA.health-polling: S 2849552427:2849552427(0) ack 755173641 win 5840 <mss...