http://blog.csdn.net/s_k_yliu/article/details/6665673
抓包
tcpdump -i eth2 host 200.200.155.143 and port 80 -s 0 -nn -w /tmp/nima.pcap
监听
tcpdump -i eth2 host 200.200.0.20 and port 80 -nn
tcpdump用法
原文：http://www.cnblogs.com/linlinfa/p/4424593.html
