[docs](https://www.tcpdump.org/manpages/tcpdump.1.html)
### Options
#### `tcpdump`
| Option | Description |
| ------- | ------------ |
| `-c` _count_
`--count` | to specify number of packets to capture |
| `-i` _interface_
`--interface=` | specify the interface e.g. 'eth0' or 'wlan0' etc. |
| `-F` _file_ | Get filter expression from _file_ |
| `-I`
`--monitor-mode` | Put interface into monitor mode|
| `-n` | No name resolution for addresses (host, port no. etc) |
| `-#`
`--number` | Print a packet number at beginning of line |
|`-t` | _Don't_ print a timestamp on each dump line. |
|`-tt` | Print the timestamp, as seconds since January 1, 1970, 00:00:00, UTC, and fractions of a second since that time, on each dump line. |
| `-ttt` | Print a delta (res dep on `--time-stamp-precision` option) between current and previous line on each dump line. default is microsecond resolution. |
| `-tttt` | Print a timestamp, as hours, minutes, seconds, and fractions of a second since midnight, preceded by the date, on each dump line. |
| `-ttttt` |Print a delta (res dep on `--time-stamp-precision`) between current and first line on each dump line. default is microsecond resolution. |
| `-w` _file_ | Write raw packets to _file_ |
| `-e` | print link level header. See manpage for more details |