-e
オプションでリンクレベルの情報を出力
$ sudo tcpdump -i en0 -n -e tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on en0, link-type EN10MB (Ethernet), capture size 96 bytes 10:18:56.369416 00:24:36:eb:5b:9d > 00:0d:0b:cb:0b:a6, ethertype IPv4 (0x0800), length 78: 192.168.11.2.54252 > 133.97.166.239.22: S 4144041584:4144041584(0) win 65535 10:18:56.390511 00:0d:0b:cb:0b:a6 > 00:24:36:eb:5b:9d, ethertype IPv4 (0x0800), length 78: 133.97.166.239.22 > 192.168.11.2.54252: S 826240350:826240350(0) ack 4144041585 win 65535