/usr/sbin/tcpdump -e -n -r tcpdump.out 'arp and ether host 08:00:20:89:28:03'


/usr/sbin/tcpdump -e -n -vvv -r tcpdump0510.out 'not (ip[6] & 0x20 == 0 and ip[6:2] & 0x1fff =0) and ip'


/usr/sbin/tcpdump -i eth0 -vvv -e -s 200 -x -r tcpdump-icmp6-1109.out icmp6



/usr/sbin/tcpdump -r tcpdump.out -vvv -x -s 200 'tcp[13] & 0x02 == 2'



/usr/sbin/tcpdump -r tcpdump.out -vvv -x -s 200 'tcp[13] & 0x01 == 1