Where is the initial RTT found in the server side capture?