Understanding particular tcpdump log

[Srikanth Raju <srikiraju () gmail com>]

Hi,
In one of my tcpdump logs, I have the following two lines which is the same packet.

00:43:44.896482   P 00:00:ac:12:80:01 ethertype IPv4 (0x0800), length 76: 172.18.128.1.ssh > 155.xx.xx.xx.56365: S 
1308033114:1308033114(0) ack 1315850475 win 5792 <mss 1460,sackOK,timestamp 12196173 122040733,nop,wscale 8>

00:43:44.896482  In 00:00:ac:12:80:01 ethertype IPv4 (0x0800), length 76: 172.18.128.1.ssh > 155.yy.yy.yy.4242: S 
1308033114:1308033114(0) ack 1315850475 win 5792 <mss 1460,sackOK,timestamp 12196173 122040733,nop,wscale 8>

I'm running with tcpdump -e -n -i any

What I want to know is the meaning of the "P" and "In" in the second column? It seems to be involved in changing the 
address of the packet. I assume that In means inbound packet.  I've searched a lot and couldn't find any documentation 
or information on this.

Thanks!
Srikanth Raju-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.