tcpdump

# IPMI (ping)
tcpdump -nni eth0 icmp  
tcpdump -i eth0  -e -n -v 'icmp and (ether host 00:16:3e:ec:11:22)'
 
# DHCP
tcpdump -i dev-mgmt  -e -n -v '(udp port 67 or port 68)'
 
tcpdump -i qg-1ee0cec6-62 -n  '(tcp port 110)'
 
# filter IP
tcpdump -i eth0 -e -n -v 'host 10.11.22.33'
 
# filter MAC
tcpdump ether host e8:2a:ea:44:55:66
 
tcpdump -n -i eth0 '(udp port 53 or port 53)'
 
# exclude
tcpdump -i eth1  -s 1500 port not 22 and port not 53

Links
https://arthurchiao.art/blog/tcpdump/