# IPMI (ping)
tcpdump -nni eth0 icmp
tcpdump -i eth0 -e -n -v 'icmp and (ether host 00:16:3e:ec:11:22)'
# DHCP
tcpdump -i dev-mgmt -e -n -v '(udp port 67 or port 68)'
tcpdump -i qg-1ee0cec6-62 -n '(tcp port 110)'
# filter IP
tcpdump -i eth0 -e -n -v 'host 10.11.22.33'
# filter MAC
tcpdump ether host e8:2a:ea:44:55:66
tcpdump -n -i eth0 '(udp port 53 or port 53)'
# exclude
tcpdump -i eth1 -s 1500 port not 22 and port not 53