tcpdump -i bat0 (whilst wget http://www.google.com from mesh node)

4:25:57.259453 IP 192.168.1.119.37746 > 192.168.1.1.53: 37899+ AAAA? www.google
.com. (32)
14:25:57.304084 IP 192.168.1.1.53 > 192.168.1.119.37746: 37899 1/1/0 CNAME www.l
.google.com. (102)
14:25:57.314561 IP 192.168.1.119.12656 > 192.168.1.1.53: 51848+ A? www.google.co
m. (32)
14:25:57.321923 IP 192.168.1.1.53 > 192.168.1.119.12656: 51848 7/0/0 CNAME[|doma
in]
14:25:57.323845 IP 192.168.1.119.54396 > fx-in-f147.1e100.net.80: SWE 576811426:
576811426(0) win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 4>
14:25:57.432719 IP fx-in-f147.1e100.net.80 > 192.168.1.119.54396: S 2862198252:2
862198252(0) ack 576811427 win 5720 <mss 1430,nop,nop,sackOK,nop,wscale 6>
14:25:57.433281 IP 192.168.1.119.54396 > fx-in-f147.1e100.net.80: . ack 1 win 36
5
14:25:57.433660 IP 192.168.1.119.54396 > fx-in-f147.1e100.net.80: P 1:78(77) ack
 1 win 365
14:26:00.433415 IP 192.168.1.119.54396 > fx-in-f147.1e100.net.80: P 1:78(77) ack
 1 win 365