tcpdump -i eth1 -w 1.pcp

tcpdump -i eth1 -w 1.pcp 存到1.pcp文件里,用wireshark打开

原文地址:https://www.cnblogs.com/renliping/p/7780310.html