tcpdump
Also written: tcpdump -i, tcpdump -r, tcpdump -w, tcpdump -e
Captures the frames passing through a connection and prints them. -i picks the connection, -w saves to a file, -r reads a file back, -e shows MACs, -n shows numbers and -c stops after N frames.