Packet capture tool three way handshake