Not too familiar with tcpflow, thanks for your short write-up. Going to check it out.