# IPMI (ping) tcpdump -nni eth0 icmp tcpdump -i eth0 -e -n -v 'icmp and (ether host 00:16:3e:ec:11:22)' # DHCP tcpdump -i dev-mgmt -e -n -v '(udp port 67 or port 68)' tcpdump -i qg-1ee0cec6-62 -n '(tcp port 110)' # filter IP tcpdump -i eth0 -e -n -v 'host 10.11.22.33' # filter MAC tcpdump ether host e8:2a:ea:44:55:66 tcpdump -n -i eth0 '(udp port 53 or port 53)' # exclude tcpdump -i eth1 -s 1500 port not 22 and port not 53