1. tcpdump -n -tttt -i eth0 -w cnsh0405.pcap src host 10.178.4.5