Generate a Network Trace in a Session
Execute the following command in a separate session to dump network traffic as the root user and interrupt the trace with CTRL-C:
tcpdump -s 0 -i eth0 -w trace.pcap
The result should look something like this:
tcpdump: listening on eth0 28 packets received by filter 0 packets dropped by kernel