%s/\n 0x\(0000\)\@!\w\+: //|%s/\n / / perldo s/\], (?:seq|ack).*length (\d+)\s+0x0000:\s+(.*)/$l=$1; $x=$2; $x=~s{\b\w\w}{$& }g; sprintf("] %s", substr($x, length($x)-3*$l))/e tcpdump -x -nr ../../itsutils/comm/delitsutils.cap