TCPDump Commands 1 2 3 4 5 # capture the first 80 bytes from eth0 tcpdump -i eth0 -s 80 -w /tmp/tcpdump.cap # filter out ip tcpdump -i eth0 host 10.32.200.131 -w /tmp/tmp01.cap