arp -a
tcpdump -w log -s 1500 port 80tcpdump: listening on em1, link-type EN10MB (Ethernet), capture size 1500 bytes
tcpdump -xqnr log | more