document updated 18 hours ago, on Nov 22, 2024

the basic starting place for a tcpdump command

tcpdump --interface=any --snapshot-length=0 -w /var/tmp/packets.pcap