pcap-dump [link] [probe] filename [-ns]
Dump all Ethernet network traffic on the given link or probe to the given filename in pcap format. The optional -ns flag sets the timestamp resolution of the file in nano-seconds. The default timestamp resolution is in micro-seconds.
eth-links