# tcpdump -i eth0 arp Kernel filter, protocol ALL, datagram packet socket tcpdump: listening on eth0 09:36:36.427377 > arp who-has nbc.ccuec.unicamp.br tell paris.ccuec.unicamp.br (0:0:b4:3a:f9:21) 09:36:36.428096 < arp reply nbc.ccuec.unicamp.br is-at 0:40:5:1a:c9:f (0:0:b4:3a:f9:21)