tcpdump
ngrep