Try this:
http://www.freesoft.org/CIE/Topics/56.htm
> Hello..
>
> when I start tcpdump by just issuing
>
> bash# tcpdump
>
> or
>
> bash# tcpdump -i eth1
>
> the packets roll by to fast.. or to specify.. it logs all packets but
> I'm only interested in a few of them. How do I limit the output
> so that only.. lets say.. UDP packets coming from 192.168.0.33 is shown?
> Or, lets say I want to see the package that BitchX sends bitchx.com at
> the first startup..?
>
>
> Thanks in advance,
>
> Daniel
>
>
> --
>
>
> /***********************************
> * Daniel Nyström, Telhack 026 Inc. *
> ***********************************/
>
> http://www.SweSec.tk
> http://www.telhack.tk
>
