root@harmaska64bites:~# tcpdump -ni eth0 'icmp' tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 11:56:10.986389 IP 10.30.0.64 > 10.30.64.166: ICMP echo request, id 54325, seq 1, length 64 11:56:10.986833 IP 10.30.64.166 > 10.30.0.64: ICMP echo reply, id 54325, seq 1, length 64 11:56:11.989612 IP 10.30.0.64 > 10.30.64.166: ICMP echo request, id 54325, seq 2, length 64 11:56:11.989700 IP 10.30.64.166 > 10.30.0.64: ICMP echo reply, id 54325, seq 2, length 64 11:56:12.990101 IP 10.30.0.64 > 10.30.64.166: ICMP echo request, id 54325, seq 3, length 64 11:56:12.990602 IP 10.30.64.166 > 10.30.0.64: ICMP echo reply, id 54325, seq 3, length 64 11:56:13.991369 IP 10.30.0.64 > 10.30.64.166: ICMP echo request, id 54325, seq 4, length 64 11:56:13.992172 IP 10.30.64.166 > 10.30.0.64: ICMP echo reply, id 54325, seq 4, length 64 11:56:14.987671 IP 10.30.0.64 > 10.30.64.166: ICMP echo request, id 54325, seq 5, length 64 11:56:14.987718 IP 10.30.64.166 > 10.30.0.64: ICMP echo reply, id 54325, seq 5, length 64