1. sudo tcpdump -i [ethname] -nt -s 500 port domain