tcp dump on 9k