[轉]Linux tcpdump命令詳解

看這裏：

http://www.cnblogs.com/ggjucheng/archive/2012/01/14/2322659.html

http://www.cnblogs.com/yc_sunniwell/archive/2010/07/05/1771563.html