Intro

Wikipedia – tcpdump

MAN PAGE OF TCPDUMP

用法

$ tcpdump -i [interface] '[expression]'

$ tcpdump -i en0 'tcp && host www.yidas.com'

# No interface flag is equal to any
$ tcpdump -i any 'port 22'

tcpdump Expression Manual