2 ms·

Another way might be to use tcpflow. Then just wait and see which files get large as the thing buffers.