1. tcpdump -i any port xxxx -s 0 -w pack.cap -v