tcpdump -i eth1 (whilst wget http://www.google.com from mesh node)

14:26:36.409857 IP 192.168.0.117.35199 > fx-in-f99.1e100.net.80: SWE 1188618495:
1188618495(0) win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 4>
14:26:36.410482 IP 192.168.0.117.14600 > 192.168.0.1.53: 48720+ PTR? 99.39.125.7
4.in-addr.arpa. (43)
14:26:36.524517 IP 192.168.0.1.53 > 192.168.0.117.14600: 48720 1/4/4 (222)
14:26:36.529445 IP fx-in-f99.1e100.net.80 > 192.168.0.117.35199: S 3729599604:37
29599604(0) ack 1188618496 win 5720 <mss 1430,nop,nop,sackOK,nop,wscale 6>
14:26:36.534416 IP 192.168.0.117.35199 > fx-in-f99.1e100.net.80: . ack 1 win 365

14:26:36.539747 IP 192.168.0.117.35199 > fx-in-f99.1e100.net.80: P 1:78(77) ack
1 win 365
14:26:39.537084 IP 192.168.0.117.35199 > fx-in-f99.1e100.net.80: P 1:78(77) ack
1 win 365