tcpdump

 tcpdump -n port 80  -i eth1 -s 2000 -w a.cap

原文地址:https://www.cnblogs.com/chris-cp/p/5182205.html