TCPDump

tcpdump -i any 监听所有网卡

sudo tcpdump src 192.168.1.100

sudo tcpdump src host 192.168.1.100 or host 192.168.1.200

sudo tcpdump src 192.168.1.100 and dst www.example.com and tcp port 80

sudo tcpdump -n  #不转换ip

sudo tcpdump -i <interface> -e  显示MAC地址